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USERS’  MERGER 
DOUBTS  REMAIN 

Expect  some  turmoil 
in  HP/Compaq  union 


BY  JAIKUMAR  VIJAYAN 

Shareholders  apparently  ap¬ 
proved  the  $21  billion  merger 
of  Hewlett-Packard  Co.  and 
Compaq  Computer  Corp.,  but 
the  sheer  scope  of  the  integra¬ 
tion  ahead  still  worries  users. 

IT  managers  say  the  pros¬ 
pect  of  product  cutbacks, 
sweeping  layoffs  and  potential 
service  disruptions  that  could 
result  from  the  merger  are 
troubling,  despite  assurances 
from  both  companies. 

“The  obvious  challenge  will 
be  the  cultural  one  —  and  it’s 
not  just  between  the  two  com- 

©ONLINE  COVERAGE 

For  complete  coverage  of  the  proposed 

HP/Compaq  merger,  visit  our  Web  site: 

www.computerworld.com/q7a1650 


HP’S  CARLY  FIORINA  is  proceed¬ 
ing  as  if  the  merger  is  a  done  deal. 


panies  this  time,”  said  Thomas 
Murphy,  CIO  at  Miami-based 
Royal  Caribbean  Cruises  Ltd., 
which  uses  both  HP  and  Com¬ 
paq  equipment. 

“I  think  there  is  a  fundamen¬ 
tal  split  within  HP  in  terms  of 
the  value  and  need  for  the  deal 
which  could  prove  over  time  to 
be  more  of  an  issue  than  the 
combination  of  the  two  com¬ 
panies,”  he  said. 

But  the  promised  benefit  of 
a  much  broader  product  and 
services  portfolio,  as  well  as 
the  cost  efficiencies  of  merg¬ 
ing  the  two  organizations,  may 
HP/Compaq,  page  69 


DOD  MAY  BAN  FOREIGN  IT  WORKERS 


Industry  fears  impact 
of  ‘xenophobic’ policy 


BY  DAN  VERTON 

In  a  post-Sept.  11  initiative  to 
boost  security,  the  U.S.  Depart¬ 
ment  of  Defense  is  quietly 
considering  a  proposal  to  ban 
foreign  IT  workers  from  taking 
part  in  unclassified  but  sensi¬ 
tive  IT  projects  throughout  the 
military. 


The  draft  policy,  which 
the  Pentagon  hasn’t  yet  re¬ 
leased,  could  be  approved  in 
60  to  90  days,  according  to 
DOD  sources. 

Harris  Miller,  president  of 
the  Arlington,  Va.-based  Infor¬ 
mation  Technology  Association 
of  America,  a  trade  association 
representing  more  than  500 
companies,  sent  a  letter  on 
March  18  to  the  Pentagon’s 
DOD  Policy,  page  14 


NEW  FLAP  OVER  ORACLE 
DATABASE  PRICING 


Users,  analysts  at  odds  with  vendor  over 
interpretation  of  named  user  contracts 


BY  MARC  L.  SONGINI 

Oracle  Corp.  last  week  found 
itself  embroiled  in  a  new  data¬ 
base  licensing  controversy, 
prompted  by  recent  audits  that 
resulted  in  the  soft¬ 
ware  vendor  telling 
some  companies  to 
pony  up  more  money. 

Some  users  and  an¬ 
alysts  accused  Oracle  of  play¬ 
ing  hardball  with  those  cus¬ 
tomers  in  order  to  force  them 
to  buy  more  named  user  li¬ 
censes  or  convert  to  costlier 
processor-based  software  li¬ 
censes.  At  issue  are  claims  that 


Oracle  changed  the  way  it  in¬ 
terprets  a  clause  in  its  named 
user  contracts. 

Oracle  defended  itself,  say¬ 
ing  the  complaints  stemmed 
from  “a  handful  of 
misunderstandings” 
about  how  the  named 
user  approach  works. 
Jacqueline  Woods, 
vice  president  of  global  prac¬ 
tices  at  Oracle,  also  said  the 
audits  aren’t  anything  new. 
The  company  regularly  per¬ 
forms  about  400  per  year,  half 
by  request  and  half  randomly, 
to  ensure  that  users  are  com- 


AT  A  GLANCE 


Points  of 
Contention 

USERS  AND  ANALYSTS:  Oracle  is  re¬ 
interpreting  a  clause  related  to  multiplexing 
software  in  its  named  user  database  licens¬ 
es  and  telling  some  customers  that  they 
need  to  buy  more  expensive  licenses. 

ORACLE:  The  complaints  are  a  result  of 
misunderstandings  about  the  terms  of  its 
named  user  licensing  policy,  which  has 
remained  consistent  “for  several  years." 

plying  with  license  require¬ 
ments,  she  said. 

In  an  attempt  to  defuse  the 
issue,  Oracle  will  grandfather 
the  licenses  of  any  users  who 
misunderstood  its  pricing, 
Oracle,  page  14 


CONTRACT 

CONFLICT 


The  government  is  facing  a  mass  exodus  of  IT  workers, 

given  that  federal  employees  are  eligible  to  retire  at  age  55 
and  29%  of  all  government  IT  workers  are  over  the  age  of  50. 
While  some  IT  managers,  like  the  Defense  Department’s  Joyce 
France  (above),  are  trying  to  recruit  and  retain  top  staffers  by 
beefing  up  their  bonuses,  many  officials  acknowledge  that  their 
efforts  might  be  too  little,  too  late.  Story  starts  on  page  38. 
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It  has  been  clear  for  some  time  now  that  the  future  will  be  a  world  in  which  everything  is  connected  to  everything,  seamlessly, 
automatically,  and  securely,  via  XML  Web  services.  What  has  not  been  clear  is  how  that  future  will  be  built.  Introducing  Microsoft'" 
Visual  Studio  .NET,  the  first  toolset  built  from  the  ground  up  for  XML  Web  services  development.  Just  one  keyword— WebMethod— 

turns  your  existing  application  into  a  Web  service,  and  with  new  Web  Forms  you  can  create  Internet 
Micfosofr^^^  applications  using  the  same  "drag-and-drop,  double-click  to  write  code"  technique  made  famous  by 

Visual  Studio. net 


TOOftCoftx 


V*ua«  Basic.  Vi 


ja:  Studio.  !he  V»3uai  Studio  logo,  and  the  NET  logo  are  oither  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  Slates  and/or  ott»e 
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The  world  takes 
a  little  step 
into  the  future. 
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Microsoft  Visual  Basic*.  Plus,  the  whole  process  of  building  Windows*,  Web,  and  mobile  applications  gets  faster  and  easier  with 
the  new  Integrated  Development  Environment  (IDE),  which  gives  you  one  toolbox,  one  debugger,  one  task  list,  one  XML  designer, 
and  more.  And  within  the  IDE  you  get  support  for  over  20  languages,  including  Visual  Basic  .NET,  Visual  C++  .NET,  and  new  Visual 
C#~  .NET,  so  you  can  leverage  your  existing  skills  and  code  across  development  teams  and  projects. 

Start  building  the  future:  visit  msdn.microsoft.com/vstudio  Software  for  the  Agile  Business. 
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WHEN  YOUR  EMPLOYEES  CANT  ACCESS  INFORMATION, 
IT'S  NOT  JUST  TIME  THEY'RE  WASTING. 


CleverPath '  Portal  .  Access  for  anyone.  Any  time.  Anywhere. 

A  few  wasted  minutes  here  or  there  doesn't  seem  like  much.  But  multiply  that  by 
thousands  of  users  worldwide  and  suddenly  you've  Wasted  a  whole  lot  of  time  and 
money.  That's  why  we  created  CleverPath  Portal.  It's  a  revolutionary  personalized 
workspace  that  provides  each  user  with  the  ability  to  access  and  utilize  applications 
and  data  from  anywhere  in  your  entire  enterprise,  at  any  time.  And  it's  all  easily 
accessible  and  clearly  organized  right  on  their  desktop.  So  it's  right  where  they  need 
it,  just  the  way  they  like  to  see  it.  Which  means  they  won't  ever  have  to  waste  another 
second  looking  for  information.  And  you  won't  waste  another  cent. 
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BALANCING 
SOFTWARE  SELECTION 

The  age-old  debate  over  whether 
to  go  with  best-of-breed  vs.  all-in- 
one  products  has  taken  a  new  turn 
as  enterprise  vendors  close  the  gap 
on  functionality.  PAGE  28 


WIRELESS  LANs  GET  ROLLING 

Despite  security  concerns,  IT  managers  are  deploying  802.11b-based 
networks.  Computerworld  explains  how  they’re  doing  it.  PAGE  46 


NEWS  6 

6  The  remedy  phase  of  the  Mi¬ 
crosoft  antitrust  trial  finds  both 
sides  airing  some  of  their  rivals’ 
dirty  internal  e-mail  laundry. 

8  Last  week’s  BrainShare  con¬ 
ference  makes  it  clear  that  it  isn’t 
your  father’s  Novell  anymore. 

10  FedEx  turns  to  mobile  data 
services  from  AT&T  Wireless 
to  support  new  high-bandwidth 
applications. 

12  A  large  medical  insurer  says 

a  $10  million  project  to  replace 
Hitachi  equipment  with  IBM  gear 
will  pay  for  itself  in  less  than  a  year. 

16  At  this  week’s  JavaOne  con¬ 
ference,  vendors  will  focus  on  lur¬ 
ing  users  away  from  Microsoft’s 
.Net  environment. 


wLildV  For  breaking  news,  updated 
twice  daily,  visit  Computer- 
I  Tl  IKV  world.com : 

www.computerworld.com/q?q4000 


BUSINESS  27 

27  Joe  Auer  says  that  IT  man¬ 
agers  often  need  to  change  their 
attitudes  when  they  reach  the 
negotiating  table  —  especially  if 
the  vendor  representative  sitting 
across  from  them  is  a  “friend.” 

32  ROI  might  be  the  acronym  du 
jour,  but  few  companies  have  cre¬ 
ated  methodologies  to  track  their 
IT  investment  returns  consistently. 

40  Career  Adviser:  Fran  Quittel 
offers  some  pointers  to  an  Air 
Force  networking  pro  who’s  think¬ 
ing  about  a  postmilitary  career  as  a 
disaster  recovery  expert  and  to  a 
Java,  C++  and  HTML  programmer 
who  hopes  to  become  chief  archi¬ 
tect  for  an  e-commerce  software 
development  effort. 

40  Workstyles:  International 
Truck  and  Engine  Corp.’s  Rick 
Herbst  talks  about  the  emphasis 
his  IT  group  places  on  account¬ 
ability  and  performance. 


TECHNOLOGY  43 

43  It’s  naive  to  think  that  our 
secrets  —  electronic  or  otherwise 
—  are  really  safe,  says  columnist 
Nicholas  Petreley. 

44  Field  Report:  Visual  Studio 

.Net,  the  primary  development  aid 
for  Microsoft’s  .Net  framework,  of¬ 
fers  deep  support  for  both  produc¬ 
ing  and  consuming  Web  services. 

50  QuickStudy:  Wireless  LANs 
use  radio  waves  instead  of  cable  to 
connect  user  devices  to  networks. 
Learn  more  in  this  week’s  tutorial. 

52  Emerging  Technologies:  Blue¬ 
tooth,  the  short-range  wireless  I/O 
technology,  is  finally  available  in 
products.  But  after  five  years  of 
development,  will  it  have  users? 

54  Security  Journal:  Mathias 

Thurman  looks  for  one  tool  to 
manage  thousands  of  firewall  rules 
for  many  devices.  But  just  when  he 
thinks  he’s  found  the  answer,  he 
realizes  there’s  no  silver  bullet. 


OPINIONS  24 

24  Maryfran  Johnson  writes 

a  memo  to  Carly  Fiorina  and 
Michael  Capellas,  telling  them 
that  if  and  when  HP  and  Compaq 
merge,  they  must  focus  on  con¬ 
cerned  customers. 

24  Pimm  Fox  points  out  that  if 
you’re  looking  for  IT  professionals, 
most  of  them  are  still  in  the  big 
metropolitan  regions.  Outside  the 
U.S.,  look  to  Romania  and  China. 

25  Michael  Gartenberg  explains 

why  it’s  time  for  the  nine  holdout 
states  to  toss  in  the  towel  and  end 
the  Microsoft  antitrust  case. 

70  Frank  Hayes  says  the  it 

staffers  at  Georgia  Tech  crafted  a 
battle  plan  on  the  fly  when  a  uni¬ 
versity  server  was  hacked  that 
could  serve  as  a  blueprint  for  any 
IT  organization. 
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TAILLESS  MICE  TALES 

The  Gadget  Guys  are  back  with  a 
review  of  Logitech’s  Cordless 
MouseMan  Optical  and  Microsoft’s 
Wireless  IntelliMouse  Explorer. 

www.computerworld.com/wireless 


TALK  OF  THE 
WORKPLACE 

A  discussion  forum  that  was 
launched  after  a  recent  story  in¬ 
volving  mainframe  skills  and  pay 
levels  has  evolved  into  a  virtual 
roundtable  on  hiring  practices. 
Check  out  the  latest  posts. 
www.computerworld.com/q7a1670 


PETRELEY  HOLDS 
COURT  ONLINE 

Computerworld  columnist  Nich¬ 
olas  Petreley  answers  community 
members’  questions  —  and  adds  a 
few  thoughts  of  his  own  —  on  .Net, 
Java  and  X  terminals,  among  other 
topics.  One  question:  “Why  do  fans 
of  .Net  have  blinders  on  when  it 
comes  to  the  ‘net’  portion?” 
www.computerworld.com/q7a1700 


NEWS  STRAIGHT 
TO  YOUR  IN-BOX 

Be  sure  not  to  miss  any  news  you 
need,  by  signing  up  for  our  free  dai 
ly  and  weekly  e-mail  newsletters. 
You  can  get  the  latest  news  head¬ 
lines  and  Shark  Tank  delivered  dai¬ 
ly,  as  well  as  weekly  newsletters  on 
more  than  20  subjects. 
www.computerworld.com/q7a1430 
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E-Mail  Salvos  Fired 
In  Microsoft  Case 


Both  sides  to  introduce  internal  e-mail, 
documents  into  remedy  phase  of  hearings 


AT  A  GLANCE 


AOL  lime  Warner 
Drops  E-Mail  Plan 

New  York-based  AOL  Time  Warner 
Inc.  reversed  a  decision  made  last 
year  that  required  all  nine  of  its  divi¬ 
sions  to  use  e-mail  software  based 
on  technology  developed  by  its 
Netscape  Communications  Corp. 
unit.  A  company  spokeswoman  said 
the  business  operations  are  now 
free  to  go  their  own  ways  on  e-mail. 
Some  divisions  had  complained  that 
Netscape’s  software  didn’t  fully 
meet  their  needs,  she  said. 

Postal  Service  to  End 
Wireless  Service 

Citing  a  lack  of  customer  interest, 
the  U.S.  Postal  Service  said  it  plans 
to  stop  offering  wireless  access  to 
its  package-tracking  and  delivery- 
confirmation  system  as  well  as  oth¬ 
er  informational  services.  The  wire¬ 
less  capabilities,  which  will  be 
dropped  next  month,  were  launched 
last  year  for  users  of  handheld  de¬ 
vices  and  Web-enabled  phones. 

Palm  Has  Profit 
Despite  Sales  Drop 

Handheld  computer  maker  Palm 
Inc.  said  it  returned  to  profitability 
in  its  third  quarter  ended  March  1, 
despite  a  sharp  drop  in  sales  com¬ 
pared  with  the  same  period  a  year 
ago.  Santa  Clara,  Calif.-based  Palm 
reported  net  income  of  S2.9  million 
for  the  quarter,  its  first  profit  after 
four  straight  losses.  But  revenue  fell 
38%  year  to  year,  dropping  from 
S470.8  million  to  S292.7  million. 


Short  Takes 

Michael  Crowley,  who  previously 
was  CIO  at  CAMPBELL  SOUP  CO.  in 
Camden,  N.J..  was  named  to  a  simi¬ 
lar  position  at  networking  equip¬ 
ment  vendor  AVAYA  INC.  in  Basking 
Ridge,  N.J. . . .  IBM  and  the  U.S. 
DEPARTMENT  OF  ENERGY  said 
they  plan  to  connect  an  IBM  super¬ 
computer  to  a  national  computing 
grid  for  scientists  by  year’s  end. 


BY  PATRICK  THIBODEAU 

WASHINGTON 

HE  REMEDY  PHASE 
of  the  Microsoft 
Corp.  antitrust  tri¬ 
al  began  last  week 
with  both  sides 
planning  to  rely  heavily  on  in¬ 
ternal  e-mails  and  reports  to 
tar  and  feather  their  oppo¬ 
nents.  But  sometimes  bad 
e-mails  say  good  things  about 
companies. 

Take  the  “internal  use  only 
—  do  not  distribute”  Sun  Mi¬ 
crosystems  Inc.  memo  that 
Microsoft  used  last  week  to  at¬ 
tack  its  competitor. 

Sun  executives  met  in  Au¬ 
gust  last  year  with  IT  officials 
at  three  end-user  firms  trying 
to  decide  between  Sun’s  Web 
services  offering,  the  Sun  Open 
Net  Environment,  or  Micro- 


Corrections 

A  story  in  our  March  11  issue, 
“Virus  Alerts  Lack  Standards," 
and  a  follow-up  column  in  our 
March  18  issue,  “Virus  Alerts 
Run  Amok."  incorrectly  charac¬ 
terized  an  open  letter  that  was 
sent  by  Kenneth  Bechtel  to  an¬ 
tivirus  software  vendors.  The 
letter  was  sent  on  behalf  of 
members  of  the  Anti-Virus  In¬ 
formation  Exchange  Network. 

In  addition,  the  company  Bech¬ 
tel  works  for  was  misidentified. 
He  is  a  consultant  at  Team 
Anti-Virus  in  Palmyra,  Pa. 

A  story  in  our  March  18  issue. 
"Brokerage  Launches  Search 
Engine  to  Aid  Call  Center."  stat¬ 
ed  that  Emeryville,  Calif.-based 
Ask  Jeeves  Inc.  sells  Version 
5.0  of  its  Answer  software.  That 
product  has  been  replaced  by 
its  JeevesOne  release. 


soft’s  .Net.  The  news  from  the 
end  users  wasn’t  good. 

“All  three  customers  ex¬ 
pressed  a  lack  of  faith  in  Sun’s 
ability  to  perform,  especially  in 
areas  where  we  are  directly 
competitive  to  Microsoft,”  Sun 
officials  wrote  in  the  docu¬ 
ment  that  was  introduced  as 
evidence.  In  another  part  of 
the  memo,  the  Sun  executives 
wrote  that  the  customers  not¬ 
ed  “a  disconnection  between 
[Sun  CEO]  Scott  McNealy’s  vi¬ 
sion  of  computing  and  Sun’s 
actions  —  everyone  believes 
the  PC  is  here  to  stay.” 

Ouch. 

While  allowing  that  such 
revelations  are  embarrassing, 
David  Smith,  an  analyst  at 
Stamford,  Conn. -based  Gart¬ 
ner  Inc.,  said,  “I  suspect  that 
you  could  find  those  kinds  of 
memos  from  any  company.” 

Indeed,  over  the  next  two 
months,  both  sides  plan  to  in¬ 
troduce  hundreds  of  e-mails, 
memos  and  other  documents 
likely  to  include  revelations 
about  the  internal  workings  of 
some  of  high  tech’s  largest 
firms.  These  frank  e-mails 
could  give  IT  executives  rare 


WASHINGTON 

When  James  Barksdale,  the  former 
CEO  of  Netscape  Communications 
Corp.,  testified  last  week  about  old 
wounds  in  the  so-called  browser 
wars  with  Microsoft,  it  was  sup¬ 
posed  to  be  powerful  testimony  for 
the  states  in  their  push  for  tougher 
remedies  against  the  software 
giant.  Instead,  U.S.  District  Court 
Judge  Colleen  Kollar-Kotelly  treat¬ 
ed  Barksdale’s  testimony  like  a 
tired  TV  rerun. 

Her  impatience  was  visible.  At 
one  point,  when  the  states'  attor- 


What’s 
Going  On? 

The  Microsoft  antitrust  trial 
remedy  phase  began  last  week. 

WHAT  TO  EXPECT:  Hundreds  of  new  in¬ 
ternal  e-mails  and  reports  about  Microsoft 
and  its  competitors. 

WHAT  COULD  HAPPEN:  Judge  Colleen 
Kollar-Kotelly  is  tough.  She  isn't  letting  the 
states  stray  into  new  areas  and  could  nar¬ 
row  this  case  to  exclude  topics  such  as 
handheld  devices.  It’s  too  early  to  predict 
an  outcome. 

BILL  GATES  TO  TESTIFY:  In  opening 
arguments,  Microsoft  officials  said  they 
expect  the  company's  chairman  to  take 
the  witness  stand. 


insight  into  vendors’  cultures. 

Sun’s  report  of  its  client 
meeting,  which  included  Mer¬ 
rill  Lynch  &  Co.,  Thomson  Le¬ 
gal  Publishing  and  Reuters 
Group  PLC,  “fits  their  culture,” 
said  Mike  Meyers,  vice  presi¬ 
dent  of  IT  at  Genesee  & 
Wyoming  Inc.,  a  Greenwich, 
Conn.-based  rail  freight  trans¬ 
portation  provider. 

Sun  is  “a  very  academic  cul¬ 
ture.  A  lot  of  their  model  tends 
to  be,  ‘Say  what  you  feel,  get  in 
your  face,  get  it  out,’  ”  said 
Meyers.  “I  think  that  would  be 
a  lot  better  than  trying  to 


ney,  Brendan  Sullivan,  defended  his 
line  of  questions,  Kollar-Kotelly 
waved  her  hand  and  sharply  told 
him  to  “just  move  on." 

In  what  may  be  a  sign  of  trouble 
for  the  states,  Kollar-Kotelly  repeat¬ 
edly  warned  their  lawyers  against 
wasting  the  court’s  time  by  revisiting 
testimony  raised  in  the  initial  trial  or 
making  new  accusations  or  charges 
against  Microsoft.  She  also  exclud¬ 
ed  some  evidence  as  hearsay. 

Kollar-Kotelly  is  intent  on  keep¬ 
ing  the  scope  of  the  trial  focused  on 
specific  anticompetitive  actions  by 


sugarcoat  their  feelings.” 

Jon  C.  Dell’Antonia,  informa¬ 
tion  systems  director  at  cloth¬ 
ing  maker  OshKosh  B’Gosh 
Inc.  in  Osh  Kosh,  Wis.,  said  he 
would  expect  his  employees  to 
be  as  frank  in  their  memos. 

“To  me,  [the  Sun  memo] 
doesn’t  say  anything  negative 
about  Sun  at  all.  It  says  that 
they  feel  comfortable  in  talk¬ 
ing  among  one  another,”  said 
Dell’Antonia.  “Wouldn’t  you 
hope  companies  would  be  con¬ 
cerned  about  what  their  cus¬ 
tomers  thought  about  them?” 

Don’t  Blame  Microsoft 

Microsoft  introduced  the 
document  in  U.S.  District 
Court  as  part  of  its  defense 
against  the  tougher  remedies 
sought  by  the  nine  states  that 
have  refused  to  sign  a  Bush  ad¬ 
ministration  settlement.  The 
software  giant  was  trying  to 
show  that  competitors’  mis¬ 
steps  are  to  blame  for  any  mar¬ 
ketplace  problems  they  may 
face  —  not  Microsoft. 

But  Microsoft  will  also  be  on 
the  receiving  end  in  this  court¬ 
room  battle. 

The  states  intend  to  intro¬ 
duce  a  series  of  documents  de¬ 
tailing  discussions  Microsoft 
had  with  Dell  Computer  Corp. 
with  the  goal  of  giving  Dell  a 
hard  time  about  selling  Linux 
desktops.  Dell  last  year  pulled 
its  desktop  Linux  line. 

Then  there’s  the  e-mail  from 
America  Online  Inc.  CEO 
Barry  Schuler  to  RealNet¬ 
works  Inc.  that  said,  “[Mi¬ 
crosoft  wants]  to  kill  you  guys 
so  badly.”  I 


Microsoft  cited  by  the  U.S.  Court  of 
Appeals  last  June.  “This  judge  is  tak¬ 
ing  a  much  closer  and  more  skepti¬ 
cal  look  at  the  states’  evidence," 
said  Hillard  Sterling,  an  antitrust  ex¬ 
pert  at  Gordon  &  Glickson  LLC,  a 
law  firm  in  Chicago. 

But  legal  experts  say  that  may 
not  indicate  bias  in  favor  of  Micro¬ 
soft.  Rather,  they  said,  Kollar-Kotel¬ 
ly  is  just  being  cautious.  Robert 
Lande,  an  antitrust  professor  at  the 
University  of  Baltimore  School  of 
Law,  said,  “The  judge  wants  to  be 
very  careful  that  she  creates  a 
record  that  will  not  be  reversed  on 
appeal." 

-  Patrick  Thibodeau 


Trial  Judge:  Keep  Evidence  Focused 
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Enterprise  IM  Lags  Behind  Expectations 


Users  say  technology 
archiving;  optimism 


still  lacks  security, 
about  uptake  persists 


BY  JENNIFER  DlSABATINO 

Instant  messaging  (IM)  has 
shed  its  image  as  a  toy  for 
teenagers  and  gained  credence 
as  a  bona  fide  business  tool. 
But  IM  hasn’t  become  as  im¬ 
portant  to  companies  as  some 
people  predicted  it  would 
more  than  a  year  ago. 

“It’s  growing  up,”  said  Jeff 
Bundy,  CIO  at  YMCA  of  the 
U.S.A.  in  Washington.  “I  think 
it’s  just  important  to  remember 
that  it’s  just  one  of  the  tools  in 
the  tool  kit.  Just  like  the  tele¬ 
phone  —  it  is  a  curse  and  a 
blessing.” 

In  a  survey  of  164  companies 
conducted  March  12  to  18  by 
Osterman  Research  Inc.  in 
Black  Diamond,  Wash.,  almost 
30%  of  respondents  said  they 
officially  use  IM,  and  another 
42%  said  they  will  likely  use  it 
in  the  future.  That  figure  is  sig¬ 
nificantly  lower  than  what 
Framingham,  Mass.-based  IDC 
projected  about  18  months  ago. 
In  the  fall  of  2000,  the  market 
research  firm  estimated  that 
70%  of  corporations,  would 
have  installed  IM  software  by 
now.  In  a  survey  of  72  corpora¬ 
tions  with  more  than  1,000  em¬ 
ployees  that  IDC  conducted  at 
that  time,  only  6.9%  of  compa¬ 
nies  said  they  had  installed 
such  software. 

IDC  won’t  publish  its  latest 
statistics  on  IM  usage  until  the 
end  of  next  month,  but  last  fall 
it  said  there  were  18.5  million 
enterprise  IM  users  in  the  U.S. 
And  optimism  for  use  of  the 
technology  in  business  contin¬ 
ues.  Gartner  Inc.  in  Stamford, 
Conn.,  said  that  more  than  70% 
of  all  U.S.  companies  will  use 
IM  by  next  year. 

Some  vertical  industries  in 
particular  benefit  from  the  use 
of  IM,  said  David  Ferris,  presi¬ 
dent  of  Ferris  Research  Inc.  in 
San  Francisco.  He  cited  finan¬ 
cial  services,  the  military,  edu¬ 
cation  and  legal  services  as  key 
beneficiaries. 

Some  users  agreed  that  IM  is 


becoming  an  everyday  busi¬ 
ness  tool.  Bob  Palmer,  vice 
president  of  IT  at  Lenox  Inc.  in 
Lawrenceville,  N.J.,  said  he 
uses  IM  daily  to  communicate 
with  his  staff  and  better  stay  on 
top  of  IT  projects. 

At  the  YMCA,  IM  will  be  a 
critical  tool  for  speeding  up 
help  desk  response  time  and 
ending  “the  ping-pong  match¬ 
es  with  voice  mail  and  tele¬ 
phone,”  Bundy  said. 


Bundy’s  30-person  staff  sup¬ 
ports  the  IT  operations  at  ap¬ 
proximately  500  of  the  YMCA’s 
2,434  branches.  Currently,  he’s 
running  a  pilot  deployment  of 
an  IM  and  collaboration  tool 
from  Groove  Networks  Inc.  in 
Beverly,  Mass.,  to  improve  IT 
help  desk  functions. 

Despite  notable  success,  IM 
continues  to  face  hurdles. 
Some  users  are  hesitant  about 
rolling  out  IM  for  security  rea¬ 
sons  and  because  of  the  lack  of 
archiving  tools,  Ferris  said. 

There  are  few  products  that 
archive  instant  messages,  he 
noted,  and  the  use  of  IM  out¬ 


side  a  corporate  intranet  can 
leave  ports  on  the  firewall 
open  while  the  IM  software 
seeks  IP  addresses. 

One  company,  InGate  Sys¬ 
tems  in  Stockholm,  has  a  new 
firewall  appliance  that  lets  Ses¬ 
sion  Initiation  Protocol-en¬ 
abled  messages  securely  move 
through  without  exposing  the 
entire  network.  The  Session 
Initiation  Protocol  is  a  proto¬ 
col  for  initiating  communica¬ 
tions  such  as  instant  messag¬ 
ing  and  Internet  conferencing. 

Last  week,  Groove  an¬ 
nounced  that  it  has  a  connec¬ 
tor  that  can  store  IM  session 
information  in  the  document 
management  software  of  Doc- 
umentum  Inc.  in  Pleasanton, 
Calif. » 


Where  11  Fail 


The  problems  that  vendors 
must  address  to  make  IM  a 
truly  integral  part  of  the  cor¬ 
porate  environment  include 
the  following: 

1  Corporate  need  for 
encryption 


2  Interoperability  among 
IM  systems 


5  a 


Integration  with 
1  existing  directories 


Message  archiving  (very 
'  few  currently  offer  this) 
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INS  Looks  to  IT  to  Revamp 
Lax  Student  Visa  System 


Will  go  from  paper 
to  Web  database 


BY  DAN  VERTON 

The  U.S.  Immigration  and  Nat¬ 
uralization  Service  (INS)  is 
embarking  upon  a  series  of 
management  and  IT  reforms 
designed  to  ensure  that  terror¬ 
ists  are  unable  to  gain  entry  to 
the  U.S.  under  false  pretenses, 
INS  Commissioner  James 
Ziglar  told  a  House  subcom¬ 
mittee  last  week. 

The  issue  of  authorizing  and 
monitoring  foreign  student 
visa  recipients  came  to  the 
forefront  with  the  events  of 
Sept.  11  and  again  this  month 
when  student  visa  approval 
letters  were  issued  for  two  of 
the  19  hijackers  who  took  part 
in  the  attacks.  In  response,  the 
INS  has  sped  up  plans  to  re¬ 
vamp  its  IT  infrastructure,  in¬ 
cluding  creating  the  agency’s 
first  CIO  position  and  moving 
from  a  paper-based  student 
visa  system  to  an  automated, 
real-time  Web-based  database. 

“When  I  started  this  job 
about  seven  months  ago  ...  I 
found  too  much  reliance  on 
manual  data  entry,  much  of 


which  had  to  be  boxed  and 
shipped  to  outside  contrac¬ 
tors,”  said  Ziglar  in  written  tes¬ 
timony  submitted  to  Congress. 
“The  student  process  had  be¬ 
come  so  lax  and  lengthy  be¬ 
cause  the  focus  of  immigration 
policies  prior  to  Sept.  11  was 
not  on  security  but  on  facilitat¬ 
ing  the  students  and  the 
schools  that  they  attended. 
The  focus  has  changed,  and  our 
process  has  changed  as  well.” 

That  new  process  will  take 
off  in  July,  when  the  INS  will 
complete  testing  on  a  pilot 


project  that  will  form  the  basis 
for  a  nationwide  system  capa¬ 
ble  of  tracking  foreign  visitors 
and  student  visa  holders. 
Known  as  the  Student  and  Ex¬ 
change  Visitor  Information 
System  (SEVIS),  the  system 
will  use  XML  technology  to 
link  thousands  of  U.S.  universi¬ 
ties,  educational  institutions, 
port  authorities  and  U.S.  State 
Department  consulates  around 
the  world  to  a  centralized  data¬ 
base  at  INS  headquarters  in 
Washington,  said  INS  spokes¬ 
woman  Eyleen  Schmidt. 

Congressional  passage  of  the 
U.S.  Patriot  Act  last  October 
provided  the  INS  with  $33  mil¬ 
lion  to  deploy  SEVIS,  which 
has  been  in  beta  testing  at 
dozens  of  schools  in  Atlanta, 
Boston  and  North  Carolina, 


How  SEVIS  Would  Work 


SEVIS  is  designed  to  provide  a 
step-by-step  method  of  monitor¬ 
ing  foreign  student  visas: 

1.  Foreign  student  enrolls  in  a 
U.S.  university,  which  generates 
an  1-20  form  in  the  database.  Uni¬ 
versities  can  do  this  for  individu¬ 
als  or  in  batch  mode. 

2.  Student  takes  bar-coded 
1-20  form  and  passport  to  a  State 
Department  consular  office  to  get 
a  visa. 

3.  Overseas  State  Department 
consular  office  checks  student 
against  terrorist  watch  lists  and 


enters  the  date  and  type  of  visa 
granted  in  the  database. 

4.  Upon  student’s  arrival  in  the 
U.S.,  the  date,  port  of  entry  and 
current  U.S.  address  are  added  to 
student  records  in  SEVIS. 

5.  University  updates  its  data¬ 
base  to  confirm  student  enroll¬ 
ment  and  any  change  of  status. 

6.  System  alerts  and  event 
notifications,  such  as  criminal 
convictions,  are  automatically 
generated  and  sent  to  INS  field 
offices. 

-  Dan  Verton 


said  Schmidt.  In  addition,  the 
law  now  requires  the  INS  to 
have  the  system  fully  opera¬ 
tional  by  next  year. 

The  centerpiece  of  SEVIS 
will  be  a  centralized,  Web- 
enabled  database  that  will  be 
able  to  track  bar-coded  1-20 
forms  —  the  forms  issued  to 
foreign  students  by  schools  to 
prove  their  enrollment.  The 
new  digital  process  will  “link 
documents  to  individual  stu¬ 
dents  and  cut  down  on  fraud,” 
said  Schmidt.  Schools  will  be 
able  to  enter  1-20  forms  into 
the  system  individually  or  in 
batch  mode. 

However,  some  schools  say 
the  data  integration  challenge 
could  be  daunting  and  costly 
for  them. 

“Our  database  is  fairly  anti¬ 
quated,  and  the  data  cannot  be 
captured  in  the  current  data¬ 
base,”  said  Cynthia  Tasaki,  as¬ 
sistant  director  of  internation¬ 
al  programs  at  George  Mason 
University  in  Fairfax,  Va. 

“It’s  going  to  cost  us  a  lot  of 
money,”  Tasaki  said,  acknowl¬ 
edging  that  the  new  system 
will  almost  certainly  improve 
the  process  of  verifying  for¬ 
eign  student  enrollments, 
which  in  the  past  could  take  up 
to  nine  months. 

An  industry  source  working 
with  the  INS  on  various  IT 
projects  said  connecting  all  of 
the  databases  in  the  next  two 
years  will  be  a  “very  big  chal¬ 
lenge,”  but  not  impossible.  > 
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Novell  to  Bolster  App 
Management  Support 

J2EE,  Web  services,  XML  support 

to  be  added  to  networking  software 


BY  MICHAEL  MEEHAN 

SALT  LAKE  CITY 

sers  who  are 
grappling  with 
unwieldy  appli¬ 
cation  infrastruc¬ 
tures  came  to 
Novell  Inc.’s  BrainShare  2002 
conference  here  last  week 
looking  for  some  pain  manage¬ 
ment  help.  And  Novell  prom¬ 
ised  to  deliver  it  by  making  its 
networking  software  capable 
of  handling  more  complex  ap¬ 
plication  management  tasks. 

Chris  Stone,  a  former  Novell 
executive  who  returned  last 
month  to  run  most  of  the  com¬ 
pany’s  operations,  said  that 
during  the  next  12  months, 
Novell  will  add  Java  2  Enter¬ 
prise  Edition  (J2EE)  function¬ 
ality,  Web  services  tool  kits 
and  XML-based  application 
programming  interfaces  to  its 
various  products. 

“I  think  [Novell]  knows  they 
have  to  go  there  to  keep  pace,” 
said  Sherra  Pierre,  vice  presi¬ 
dent  of  information  systems  at 
New  York-based  Sesame  Work¬ 
shop  Inc.  Pierre  added  that 
the  producer  of  children’s  pro- 


SALT  LAKE  CITY 

More  flash  and  less  substance  is 
rarely  found  on  the  wish  lists  of  IT 
managers,  but  numerous  Novell 
users  made  it  clear  at  BrainShare 
2002  here  that  they  want  the  ven¬ 
dor  to  start  selling,  and  selling  hard. 

“They  make  great  stuff,  but  no 
one  seems  to  know  about  it,"  said 
David  Hasselbach,  a  senior  sys¬ 
tems  programmer  at  the  University 
of  Michigan  Medical  Center. 

Users  want  to  invest  in  technol¬ 
ogy  that  has  a  long-term  future, 
Hasselbach  said,  adding  that  Nov¬ 
ell  needs  to  step  up  its  presence 


gramming  plans  to  pursue  a 
Java  and  Web  development  en¬ 
vironment  strategy. 

Like  several  other  attendees, 
Pierre  said  Sesame  Workshop 
is  relying  on  Novell’s  technolo¬ 
gy  to  set  up  an  IT  backbone 
that  better  coordinates  its  di¬ 
rectory  services  and  applica¬ 
tion  databases.  For  example, 
the  organization  is  using  Nov- 


NetWare  Lives 

Novell  has  the  following  up¬ 
grades  of  its  network  operat¬ 
ing  system  in  the  works: 


CODE  NAME:  Nakoma 


Due  out  early  next  year  with  J2EE 
support,  zero-cost  deployment 
capabilities  and  a  consolidated 
set  of  tools.  Will  be  released 
along  with  a  related  product, 
code-named  Hayden,  that  in¬ 
cludes  64-bit  support  and  a 
policy-driven  rules  engine. 


CODE  NAME:  Uinta 


Due  for  release  in  late  2004  or 
early  2005,  with  self-configuring 
and  self-healing  features. 


in  the  software  market. 

Sean  Welsh,  director  of  core  en¬ 
gineering  at  Mount  Sinai  Hospital 
in  New  York,  said  he  also  wants  to 
see  Novell  do  a  better  job  of  going 
out  and  seeking  converts  to  its 
applications. 

Welsh  noted  that  he  has  a  clus¬ 
ter  of  NetWare  3.0  servers  that 
haven’t  had  to  be  rebooted  in  six 
years.  "It’s  not  like  I  bleed  Novell 
red,  but  this  stuff  works,”  he  said. 

During  his  keynote  speech 
and  in  subsequent  interviews. 
Novell  Vice  Chairman  Chris  Stone 
promised  that  the  company  would 


ell’s  NetWare  and  eDirectory 
tools  to  create  a  single  sign-on 
capability  for  internal  users  of 
its  Web-based  applications. 

The  project  was  scheduled 
to  go  live  late  last  week,  and 
Pierre  said  she  hopes  it  will 
free  her  staff  from  the  task  of 
managing  disparate  directories 
containing  user  names,  pass¬ 
words  and  access  privileges. 

“It’s  a  nightmare  to  manage 
passwords,”  she  said.  “You’ve 
got  15  different  applications 
with  separate  passwords  and 
separate  security  to  keep  track 
of.  That’s  a  full-time  job.” 

Stone  said  he  envisions  turn¬ 
ing  Novell’s  sprawling  product 
line  into  “a  distributed  applica¬ 
tion  environment  sitting  in  the 
network.”  As  part  of  the  plan, 
he  added,  Novell  will  do  away 
with  the  proprietary  program¬ 
ming  interfaces  in  its  software. 


“They’re  coming  dangerous¬ 
ly  close  to  being  what  people 
call  an  application  server,”  said 
John  Enck,  an  analyst  at  Gart¬ 
ner  Inc.  in  Stamford,  Conn. 
He  added  that  Novell’s  flag¬ 
ship  NetWare  software  could 
evolve  into  more  of  an  applica¬ 
tion  development  and  manage¬ 
ment  suite  under  Stone’s  plan. 

“I’d  like  to  see  them  head 


be  more  aggressive  about  battling 
Microsoft  Corp.  through  deals  with 
corporate  users  (see  interview 
at  right). 

At  one  point  in  the  speech, 

Stone  selected  four  users  from  the 
audience  and  asked  them  what 
they  most  wanted  from  Novell.  All 
four  asked  for  the  same  thing:  bet¬ 
ter  marketing. 

But  Novell  customers  have 
heard  tough  talk  about  marketing 
before.  Donald  Barber,  a  technical 
support  specialist  at  Dallas  Area 
Rapid  Transit  in  Texas,  pointed  out 
that  a  similar  message  was  deliv¬ 
ered  at  last  year's  BrainShare  con¬ 
ference,  to  no  great  avail. 

-  Michael  Meehan 


down  that  path,”  said  David 
Hasselbach,  a  senior  systems 
programmer  at  the  University 
of  Michigan  Medical  Center  in 
Ann  Arbor.  “Ideally,  you  want 
to  leverage  some  of  the  tech¬ 
nology  you’ve  already  got  in- 
house,  and  we’re  a  longtime 
Novell  user.” 

Tammy  Spangler,  director  of 
IT  at  Boise,  Idaho-based  Ida- 
corp  Inc.’s  energy  trading  unit, 
said  that  her  operation  installed 
eDirectory  last  year  to  help 


Exec  vows  firm 
will  ‘ stop  whining / 
be  more  aggressive 

BY  MICHAEL  MEEHAN 
AND  DON  TENNANT 

SALT  LAKE  CITY 

Chris  Stone  last  month  returned 
to  Novell  Inc.  as  vice  chair¬ 
man  in  the  office  of 
the  CEO  after  having 
left  the  company  in 
1999.  Stone,  who  is 
overseeing  opera¬ 
tions  such  as  engi¬ 
neering,  marketing 
and  consulting,  spoke 
with  Computerworld 
at  last  week’s  Brain¬ 
Share  user  confer¬ 
ence  about  changes 
he  plans  to  make  at  Novell. 

You  said  in  your  keynote  that  you’re 
going  to  beat  Microsoft  Corp.  at  its 
own  game  with  respect  to  aggres¬ 
sive  tactics.  Can  you  elaborate  on 
that?  What  Microsoft  has  been 
doing  is  targeting  our  channel. 
They  go  after  channel  part¬ 
ners  of  ours,  and  they  give 
them  [Windows]  NT,  as  long 
as  they’ll  dump  NetWare. 
That’s  their  strategy,  and  it’s 
been  very  successful.  So  why 
wouldn’t  we  do  that?  Novell 
has  been  one  of  those  compa¬ 
nies  to  just  sit  around  and 
whine  about  it.  Let’s  stop  whin¬ 
ing  and  go  back  to  the  same 
channel  and  say,  “Hey,  how’d 
you  like  NetWare  6  for  free?” 


mesh  online  trading  applica¬ 
tions  and  back-end  systems. 

“The  key  is  to  get  the  data 
centralized  and  your  security 
in  place,”  Spangler  said.  “After 
that,  you  can  start  to  play  with 
the  applications.” 

She  noted  that  Idacorp  Ener¬ 
gy  plans  to  use  Novell’s  tools  to 
distribute  software  upgrades 
to  end  users  and  to  authenti¬ 
cate  users  on  multiple  devices 
in  order  to  increase  their  mo¬ 
bility.  I 


Did  Novell  miss  the  boat  with  Java? 

Yes,  absolutely.  We  blew  it. 

What  do  you  attribute  that  to? 

We  couldn’t  let  go  —  couldn’t 
let  go  of  [NetWare  Loadable 
Modules],  couldn’t  let  go  of 
[NetWare  Core  Protocols]. 
There  are  a  million  of  these 
proprietary  interfaces  to 
Novell  products. 

You’ve  got  some  good 
technology.  Do  you 
think  that  makes  Novell 
a  prime  acquisition  tar¬ 
get?  No.  As  a  man¬ 
agement  team  here, 
we’re  just  not  inter¬ 
ested  in  that.  We’re 
interested  in  making 
the  company  succeed 
on  its  own  merits. 

Do  you  feel  like  you  have  the  tech¬ 
nology  and  resources  in-house  that 
you  need?  No,  we  do  not. 

Do  you  have  to  look  for  acquisitions 

to  get  it?  Yes.  We’ve  been  talk¬ 
ing  a  lot  about  Web  services. 
What’s  the  missing  component 
there?  An  authoring  tool.  In  the 
Web  services  area,  you’ve  got 
to  have  an  app  server  [and] 
you’ve  got  to  have  a  complete 
authoring  and  development 
environment.  There’s  an  inter¬ 
esting  space  for  us  to  look  at.  ► 

T°  read  the  full 
WU1L1\  interview  with 
T  Chris  Stone,  visit 

U1 our  Web  site. 

www.computerworld.com/q?28200 


Users  to  Novell:  Go  Forth  and  Market 


Stone:  Novell  Wil  Beat 
Microsoft  at  Its  Own  Game 


STONE:  Novell  “blew 
it”  regarding  Java. 


Unocal  Corporation  Runs 

Oracle9/  Application  Server 


Successful  businesses  worldwide  run 
0racle9/  Application  Server. 


oracle.com 
or  call  1.800.633.1072 


Copyright  ©2001-2002  Oracle  Corporation.  All  rights  reserved.  Oracle  is  a  registered  trademark  of  Oracle  Corporation 
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Microsoft  Warns  of 
Second  Java  Raw 


Microsoft  Corp.  warned  of  a  second 
security  vulnerability  in  Java  virtual 
machine  code  that  could  affect 
companies  that  have  proxy  servers 
between  their  Web  browsers  and 
the  Internet.  The  newly  identified 
flaw  could  let  attackers  use  Java 
applets  to  access  PCs  and  run  code 
as  if  they  were  the  authorized  users. 
Microsoft  said  a  fix  that  was  released 
early  this  month  for  the  first  vulner¬ 
ability  will  also  fix  the  second  one. 

Oracle  to  Support  9i 
On  Linux  Mainframes 

Oracle  Corp.  said  it  plans  to  release 
by  midyear  a  version  of  its  9i  data¬ 
base  that  supports  IBM  mainframes 
running  the  Linux  operating  system. 
Developer  releases  of  the  Linux- 
based  9i  software  are  available  now 
and  can  be  downloaded  for  free 
from  Oracle's  Web  site.  Oracle  said 
the  mainframe  Linux  version  of  9i 
will  be  priced  according  to  the  com¬ 
pany’s  standard  licensing  model. 

Study:  Certifications 
Help  Protect  Bonuses 

IT  workers  with  technical  certifica¬ 
tions  have  done  better  on  bonuses 
during  the  past  five  quarters  than 
those  who  aren’t  certified,  accord¬ 
ing  to  a  study  of  more  than  1,800 
employers  in  North  America  and 
Europe  by  Foote  Partners  LLC  in 
New  Canaan,  Conn.  The  average 
bonuses  given  to  workers  with  cer¬ 
tifications  remained  steady  as  a  per¬ 
centage  of  their  base  pay,  Foote  said. 

Short  Takes 

Linux  vendor  RED  HAT  INC.  in  Re¬ 
search  Triangle  Park,  N.C.,  reported 
a  $41.9  million  net  loss  on  revenue 
of  $18  6  million  for  its  fourth  quar¬ 
ter  ended  Feb.  28. . . .  INTEL  CORP. 
announced  a  low-voltage  Pentium 
hi  chip  for  use  in  dual-processor 
Dade  servers  and  said  it  expects 
systems  to  debut  later  this  year. 
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FedEx  Expands 
Net  Reach  to 
Mobile  Data 


Augments  private 
network  to  support 
high-bandwidth  apps 


BY  BOB  BREWIN 

ORLANDO 

Fedex  corp.  has  signed 
a  five-year  deal  to  use 
AT&T  Wireless  Ser¬ 
vices  Inc.’s  next-gen¬ 
eration  mobile  data 
network  to  support  new,  high- 
bandwidth  applications  to  be 
used  by  its  40,000  couriers. 
Analysts  said  the  move  demon¬ 
strates  that  commercial  mobile 
data  services  are  becoming  a 
reality  for  enterprise  users. 

FedEx  also  disclosed  that  it 
has  selected  Microsoft  Corp.’s 
Pocket  PC  operating  system 
as  the  technology  for  its  next- 
generation  mobile  scanner  and 
package-tracking  device,  which 
will  be  called  PowerPad. 

Ken  Pasley,  FedEx’s  director 
of  wireless  systems  develop¬ 
ment,  said  the  AT&T  Wireless 
General  Packet  Radio  Service 
(GPRS)  network  “gives  us  sig¬ 
nificantly  more  bandwidth” 
than  the  company’s  private 
network  and  will  allow  FedEx 
to  expand  the  types  of  applica¬ 
tions  used  on  tracking  devices. 
The  throughput  of  the  GPRS 
network  is  about  20K  to  40K 


Need  for  Speed 

FedEx  has  opted  to  augment 
its  nationwide  private  net¬ 
work  with  AT&T  Wireless’ 
GPRS  network  to  support 
high-bandwidth  applications. 

FedEx  Private  Network 

19.2K  bit/sec. 

GPRS  Network 

20K  to  40K  bit/sec. 


bit/sec.,  compared  with  the 
19.2K  bit/sec.  that  FedEx  cur¬ 
rently  gets  on  its  nationwide 
private  network.  The  new  net¬ 
work  will  allow  couriers  to 
send  fat  files  such  as  digital 
signatures  and  could  also  sup¬ 
port  voice  recognition  technol¬ 
ogy,  Pasley  said. 

Pasley,  who  spoke  with  Com- 
puterworld  last  week  at  the 
Cellular  Telecommunications 
and  Internet  Association’s  trade 
show  here,  said  the  airtime 
price  that  Memphis-based  Fed¬ 
Ex  negotiated  with  Redmond, 
Wash.-based  AT&T  Wireless 
will  be  about  the  same  as  the 
cost  of  maintaining  the  aging 
private  network.  For  competi¬ 
tive  reasons,  Pasley  declined  to 
provide  details  of  the  pricing 
he  negotiated  with  AT&T. 

FedEx  doesn’t  pay  airtime 
charges  for  its  20-year-old  pri¬ 
vate  wireless  network,  Pasley 
said,  but  the  company  has  to 
maintain  towers  and  a  network 
of  750  radio  repeaters  —  de¬ 
vices  that  send  a  signal  from 
one  tower  to  another  —  as  well 
as  the  wire-line  networks  that 
hook  the  wireless  network  into 
its  systems. 

FedEx  intends  to  use  the 
AT&T  Wireless  network  and 
capacity  to  initially  supple¬ 
ment  its  private  network  in 
large  metropolitan  areas.  The 
resources  of  the  private  net¬ 
work  will  be  redeployed  to 
serve  smaller  areas,  Pasley  said. 

Ken  Dulaney,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn., 
said  that  makes  sense,  because 
“cellular  carriers  like  AT&T  will 
equip  high-population  or  well- 
traveled  areas  with  [GPRS  and 
Global  System  for  Mobile 
Communications  networks].” 
But  carriers  won’t  put  towers 
in  rural  areas  because  there’s 
“no  money  to  be  made”  in 
those  locations,  he  said. 

The  AT&T  network  will  be 
used  to  support  the  PowerPad 


Handhelds  Go  Wireless 


ORLANDO 

Microsoft  and  its  hardware  part¬ 
ners  last  week  introduced  “always- 
on”  Pocket  PC-based  handhelds 
configured  to  operate  on  the  net¬ 
works  of  four  U.S.  cellular  carriers. 

This  full-force  push  into  the 
U.S.  cellular  network  market,  an¬ 
nounced  here  at  the  annual  Cellu¬ 
lar  Telecommunications  and  Inter¬ 
net  Association  trade  show,  builds 
on  devices  Microsoft  already  sells 
in  Europe  and  in  parts  of  Asia  for 
use  on  the  Global  System  for  Mo¬ 
bile  Communications  standard. 

According  to  Ed  Suwanjindar, 
product  manager  in  Microsoft’s 
mobility  group,  the  carriers  will  sell 
the  hardware  in  much  the  same 
way  they  sell  phones  as  part  of  a 
service  package  that  includes  air¬ 
time.  Microsoft  intends  to  help  the 
carriers  develop  enterprise  offer¬ 
ings  “by  introducing  them  to  our 
existing  customer  base,"  Suwan¬ 
jindar  said.  “We  want  to  help  [the 
carriers]  make  a  compelling  busi¬ 
ness  case  for  these  devices.” 


Meanwhile,  Handspring  Inc. 
in  Mountain  View,  Calif.,  which 
sells  handhelds  based  on  Palm 
Inc.’s  Palm  operating  system,  an¬ 
nounced  agreements  to  furnish  its 
Treo  communicator  for  use  on  the 
networks  of  two  carriers. 

Despite  Handspring’s  two 
deals,  analysts  said  Microsoft, 
which  launched  the  Pocket  PC  in 
April  2000,  has  gained  important 
momentum  over  the  Palm  system. 

Isaac  Ro,  an  analyst  at  Boston- 
based  Aberdeen  Group  Inc.,  said 
that  with  the  four  carrier  deals, 
Microsoft  has  gained  a  lead  in  the 
handheld  computing  market  pio¬ 
neered  by  Santa  Clara,  Calif.- 
based  Palm  -  especially  within  the 
enterprise  market.  “This  is  another 
squandered  opportunity  in  the  en¬ 
terprise”  on  Palm’s  part,  Ro  said. 

Daphne  Jackson,  a  spokes¬ 
woman  for  Palm,  said  the  compa¬ 
ny  had  no  immediate  comment  on 
the  new  Microsoft  wireless  prod¬ 
ucts  and  services. 

-  Bob  Brewin 


Handheld  Wireless  Wars 


Microsoft  and  Handspring  will  offer  handheld  computers  and 
Microsoft  Smartphones  capable  of  operating  on  the  networks 
of  four  of  the  top  five  U.S.  carriers. 


|  CARRIER 

DEVICE 

|  NETWORK  PROTOCOL  | 

|  SUBSCRIBERS  | 

Cingular 

Wireless 

Pocket  PC, 

Microsoft  Smartphone, 
Handspring  Treo 

GSM 

21.6M 

Sprint  PCS 
Group 

Pocket  PC, 

Treo 

Code  Division 
Multiple  Access 
(CDMA) 

15.8M 

Verizon 

Wireless 

Pocket  PC 

CDMA 

29.4M 

VoiceStream 
Wireless  Corp. 

Pocket  PC 

GSM 

7M 

tracker  device,  which  FedEx  is 
developing  based  on  the  Mi¬ 
crosoft  Power  PC  operating 
system,  Pasley  said.  The  Power- 
Pad  will  use  Bluetooth  short- 
range  wireless  communications 
to  feed  data  from  the  handheld 
computer  to  phones  that  couri¬ 
ers  will  wear  on  their  belts.  The 
phones  will  connect  to  the 
AT&T  Wireless  network. 

Pasley  gave  few  details  about 
PowerPad,  saying  it’s  still  under 


development.  But,  he  said, 
FedEx  wants  it  equipped  with 
voice  recognition  technology. 
Symbol  Technologies  Inc.  in 
Holtsville,  N.Y.,  and  Motorola 
Inc.  in  Schaumburg,  Ill.,  are  de¬ 
veloping  prototypes  of  the 
PowerPad  hardware,  he  said.  I 
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THE  COMPAQ  ADAPTIVE  INFRASTRUCTURE  IS  ABOUT  TO  CHANGE  EVERYTHING. 

Technology  has  automated  just  about  everything  these  days.  But  curiously,  the  corporate  data  center  has  lagged  behind. 

There,  highly  skilled  people  still  spend  inordinate  amounts  of  time  doing  things  like  manual  fault  searches  and  mindlessly 
repetitive  server  management  tasks.  It's  more  than  ironic.  It’s  enormously  counterproductive.  Because  every  initiative  a 
corporation  undertakes — whether  it’s  in  operations,  marketing,  accounting  or  HR — goes  through  the  data  center. 

But  the  new  Compaq  Adaptive  Infrastructure  will  take  your  critical  initiatives  farther  and  faster  than  ever  before.  Its  next- 
generation  ProLiant"'  BL  server  blade  technology  features  innovative  architecture  that  conserves  space  and  resources  by 
multiplying  performance  per  square  foot  of  data  center.  And  ProLiant  Essentials  Software  management  tools  that  offer 
levels  of  control  scaled  to  your  needs  so  you  can  rapidly  adapt  to  change,  remotely  deploying  new  technology — and 
redeploying  existing  technology — in  the  time  it  takes  to  click  on  a  mouse. 

It's  a  technological  advance  with  enormous  implications  for  business.  And  Compaq  Global  Services  can  provide  the  expert, 
responsive  support  to  help  you  make  it  happen.  Find  out  more  by  calling  your  Compaq  Account  Representative  or  reseller;  or 
dial  1-800-AT  COMPAQ,  press  option  5  and  mention  priority  code  SCA,  or  log  on  to  compaq.com/adapt4 

[Log  on:  compaq.com/adapt4 
Or  call:  1-800-AT-COMPAQ 
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Medicare  Insurer  Reaps  $10M 
ROI  on  Storage  Consolidation 


COMPUTERWORLD  March  25, 2002 


Carrier:  IBM  technology  cheaper,  faster 


BY  LUCAS  MEARIAN 

Less  than  a  year  af¬ 
ter  it  spent  about  $10 
million  to  consoli¬ 
date  its  storage-area 
network  infrastruc¬ 
ture,  one  of  the  nation’s  largest 
Medicare  carriers  says  that  it’s 
beginning  to  reap  a  full  return 
on  its  investment  and  has 
saved  an  additional  40%  on  its 
hardware  costs. 

Wisconsin  Physicians  Ser¬ 
vice  Insurance  Corp.  (WPS) 
processes  about  369,000  claims 
each  day  for  Medicare  and  mil¬ 
itary  insurance  accounts.  In  re¬ 
cent  years,  the  Madison,  Wis.- 
based  insurer  has  added  Illi¬ 
nois,  Michigan  and  Minnesota 
to  its  Medicare  rolls,  which  in 
turn  has  led  to  a  leap  in  annual 
claims,  from  the  $840  million  it 
was  processing  in  1997  to  just 
over  $7  billion  last  year. 

Randy  Lengyel,  senior  vice 
president  of  information  sys¬ 
tems  at  WPS,  said  the  increase 
in  claims  processing  forced  the 
company  to  revisit  its  business 
partnerships  with  technology 
vendors.  That  led  to  a  major 
shift,  as  WPS  replaced  Hitachi 
Data  Systems  Corp.  equipment 
with  IBM  products  in  June. 

The  insurer  had  been  using 
Santa  Clara,  Calif.-based  HDS’s 
high-end  7700  disk  array  with 
2.9TB  of  capacity,  as  well  as 
four  HDS  midrange  arrays 
with  1TB  of  capacity  each.  It 
replaced  them  with  two  IBM 
Shark  Enterprise  Storage  Sys¬ 
tem  Servers  with  a  combined 
capacity  of  11.6TB.  It  also  re¬ 
placed  HDS’s  Pilot  77  main¬ 
frame  with  IBM’s  z/900  model. 

An  HDS  spokeswoman  said 
the  company’s  choice  of  IBM 
technology  had  more  to  do 
with  the  insurer  not  being  al- 
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lowed  to  continue  reselling 
HDS’s  midrange  RAID  device, 
an  accusation  WPSI  denied. 

Jim  Wang,  director  of  enter¬ 
prise  network  services  at  WPS, 
said  HDS’s  technology  was  de¬ 
pendable,  fast  and  easy  to  man¬ 


age,  but  IBM  won  out  on  price, 
speed  and  interoperability. 
“On  the  performance  side,  IBM 
has  the  same  rating  in  MIPS  as 
Hitachi,  but  while  the  new 
z/900  has  the  same  number  of 
MIPS,  it’s  running  a  lot  faster, 
so  our  batch  windows  are  a 
lot  shorter,”  Wang  said.  “Our 
technicians  are  a  lot  happier 
about  this.” 


The  upgrade  allows  WPS  to 
take  a  single  “snapshot”  of  its 
mainframe,  tape,  LAN  and 
open  systems  server  environ¬ 
ment  in  just  under  two  hours 
using  30  tapes.  Previously,  it 
took  the  insurance  company 
six  hours  and  430  tape  car¬ 
tridges  just  to  get  a  snapshot  of 
its  mainframe  environment 
each  week,  said  Lengyel.  I 


Tale  of  the  Tape 

What  Wisconsin  Physicians 
Service  Insurance  got  for  its 
$10M  storage  replacement: 

■  Reduction  in  backup  time 

from  six  hours  and  430  tape 
cartridges  to  two  hours  and 
30  cartridges. 

■  25%  reduction  of  its  tape 
library  floor  space. 

■  40%  savings  on  hardware  costs. 

■  An  estimated  10-and-a-half- 
month  ROI  on  $10  million-plus 
storage  investment. 


FBI  Hints  at  Dismantling  Cyberthreat  Arm 


Private-sector  trust 
at  stake,  say  critics 


BY  DAN  VERTON 

WASHINGTON 

A  decision  by  FBI  Director 
Robert  Mueller  is  expected 
this  week  on  a  plan  to  disman¬ 
tle  the  FBI’s  cyberthreat  warn¬ 
ing  arm,  the  National  Infra¬ 
structure  Protection  Center 
(NIPC).  Such  a  move  could  re¬ 
verse  years  of  progress  made 
toward  improving  information¬ 
sharing  between  the  private 
sector  and  the  government, 
critics  warned. 

Mueller  is  poised  to  decide 
whether  to  break  up  the  NIPC 
and  transfer  pieces  of  the  orga¬ 
nization  to  the  FBI’s  criminal, 
counterterrorism  and  counter¬ 
intelligence,  law  enforcement 
services  and  administration  di¬ 
visions.  The  FBI  wouldn’t 
comment  on  the  plan,  which 
Mueller  first  outlined  last 
month  in  private  meetings 
with  members  of  Congress. 

Ronald  Dick,  the  NIPC’s  di¬ 
rector,  said  any  word  of  a  final 
decision  is  speculation.  Dick 
said  Mueller  “is  a  strong  sup¬ 
porter  of  the  NIPC  and  hasn’t 
made  a  final  decision  on  what 
will  be  in  the  new  cybercrime 
division,  nor  how  that  will  im¬ 
pact  the  NIPC,  if  at  all.” 

In  a  March  19  letter  to  the 
FBI  director  that  was  obtained 
by  Computerworld  and  The 


Associated  Press,  Sen.  Charles 
Grassley  (R-Iowa),  a  member 
of  the  Judiciary  Committee, 
told  Mueller  that  the  plan 
“would  destroy  the  fragile 
trust  between  NIPC  and  the 
private  sector,  which  controls 
90%  of  the  nation’s  critical  in¬ 
frastructure.”  He  also  urged 
Mueller  not  to  dismantle  the 
NIPC  by  burying  it 
within  the  “heavy- 
handed  manage- 


CYBERTHREAT 


sharing  and  analysis  centers], 
would  immediately  cut  off  the 
flow  of  infrastructure  informa¬ 
tion  to  the  FBI  if  NIPC  is  dis¬ 
mantled.” 

The  Senate  Budget  Com¬ 
mittee  handed  Grassley  a  tacti¬ 
cal  victory  last  week  by  pass¬ 
ing  a  sense-of-the-Senate  reso¬ 
lution  denying  the  FBI  addi¬ 
tional  money  for 
the  NIPC  should 
the  bureau  move 


ment  and  culture”  of  the  FBI’s 
criminal  division. 

“To  deepen  the  association 
of  NIPC  with  the  most  power¬ 
ful  law  enforcement  agency  in 
the  nation  would  only  exacer¬ 
bate  the  fear  the  private  sector 
has  about  sharing  critical  in¬ 
formation  necessary  for  the 
success  of  NIPC,”  Grassley 
wrote.  “Even  worse,  I  have 
been  informed  by  members  of 
the  private  sector  that  many 
companies  and  other  organiza¬ 
tions,  including  [information- 


to  subsume  the  agency. 

Although  they  are  nonbind¬ 
ing,  such  sense  resolutions  car¬ 
ry  influence  with  appropria- 
tors  on  Capitol  Hill.  In  a  state¬ 
ment,  Grassley  called  the  com¬ 
mittee’s  resolution  a  “positive 
step  toward  ensuring  that  the 
[NIPC]  remains  intact.” 

Established  in  February  1998, 
the  NIPC’s  mission  is  “to  de¬ 
tect,  deter,  assess  and  warn” 
the  government  and  the  pri¬ 
vate  sector  of  significant  threats 
to  Internet  security. 


However,  the  role  of  the 
NIPC  remains  a  contentious 
issue  on  Capitol  Hill,  where 
the  national  security  commu¬ 
nity  has  complained  of  what  it 
sees  as  the  NIPC’s  inability  to 
share  strategic  warning  infor¬ 
mation  in  a  timely  manner. 
Also,  many  companies  remain 
hesitant  to  share  sensitive  or 
proprietary  data  without  as¬ 
surances  that  the  information 
won’t  be  inadvertently  dis¬ 
closed  to  competitors. 

Phyllis  Schneck,  a  vice  presi¬ 
dent  at  Atlanta-based  security 
consulting  firm  SecureWorks 
Inc.  and  co-chairwoman  of  the 
FBI’s  InfraGard  program,  said 
that  regardless  of  any  reorgani¬ 
zation,  “at  the  top  of  the  priori¬ 
ty  list  for  the  private  sector 
is  continuing  to  work  closely 
with  the  NIPC  to  exchange  as 
much  information  as  possible.” 

The  InfraGard  program,  a 
public/private  cybercrime  se¬ 
curity  initiative  with  chapters 
managed  out  of  the  FBI’s  56 
field  offices,  currently  has 
more  than  3,500  private-sector 
members.  I 


NIPC  Timeline 


Ronald  Dick  appointed  director  of  NIPC;  he  inherits  an  or¬ 
ganization  still  in  start-up  mode  and  lacking  staff  expertise. 


Dick  initiates  plan  to  restructure 
NIPC  along  the  lines  of  Centers 
for  Disease  Control. 


Feb.  1998 

March  2001 

Dec.  2001 

Jan.  2002 

Feb.  2002 

. 

. 

NIPC  established  by  U.S.  Department 
of  Justice  and  FBI  as  a  government/ 
private-sector  partnership. 


FBI  announces  a  reorganization, 
including  a  new  cybercrime  divi¬ 
sion  within  its  Criminal  Investiga¬ 
tion  Division. 


FBI  outlines  plans  to  break  up 
NIPC  and  merge  organization  into 
various  FBI  divisions. 
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Mobility  is  added. 

The  network  goes  anywhere,  whether 


the  road,  < 


at  home  or  at  work. 


SOLUTIONS  FOR  YOUR  NETWORK 


VPN/SECURITY 
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WIRELESS  AND  MOBILE  OFFICE  ► 


cisco.com/go/mobility 


IP  COMMUNICATIONS 

+ 
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000  Policy 

senior  acquisition  and  tech¬ 
nology  official  urging  a  full 
public  review  and  discussion 
of  a  policy  he  referred  to  as 
“xenophobic.” 

“The  implications  could  be 
substantial,”  wrote  Miller  in 
his  letter  to  Edward  Aldridge, 
the  DOD’s  undersecretary  for 
acquisition,  technology  and 
logistics.  “America’s  defense 
readiness  depends  on  having 
ready  access  to  the  best  avail¬ 
able  technology  and  technical 
skill  sets.  Precipitous  action 
here  could  make  it  much  more 
difficult  and  expensive  for  the 
military  services  to  acquire  the 
requisite  IT  services.” 

The  Pentagon  hadn’t  replied 
to  Miller  by  press  time. 

The  potential  change  in 
DOD  policy  comes  at  a  time 
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Oracle 

without  charging  them  addi¬ 
tional  fees,  Woods  said.  Seven 
such  users  have  been  identi¬ 
fied  thus  far,  she  noted. 

But  some  users  who  have  re¬ 
cently  been  approached  by  Or¬ 
acle  on  pricing  issues  said  the 
process  wasn’t  a  pleasant  one. 

“I  want  them  to  quit  chang¬ 
ing  the  rules,”  said  the  vice 
president  of  information  sys¬ 
tems  at  a  manufacturer  in  the 
Midwest  that  was  audited  by 
Oracle  late  last  year.  The  com¬ 
pany  is  now  shifting  from 
named  user  database  licensing 
to  processor-based  pricing  and 
thinks  it  will  be  better  off  as  a 
result,  said  the  IT  manager, 
who  requested  anonymity.  But 
the  auditing  process  “doesn’t 
allow  for  any  negotiation  of 
any  sort,”  the  manager  said. 

Mark  Paris,  director  of  man¬ 
agement  information  systems 
at  Kleinfelder  Inc.,  said  the 
San  Diego-based  construction 
management  and  engineering 
services  firm  hasn’t  been  for¬ 
ma  iy  audited  by  Oracle.  But 
Oracle  representatives  told 
•' cris  earlier  this  year  that  they 
.  nfed  to  “evaluate  our  data- 
b  ,e  license”  to  ensure  that 
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THE  DOD,  housed  in  the  Pentagon  (above),  is  thinking  about  barring  for¬ 
eign  IT  workers  from  taking  part  in  DOD  projects  in  the  wake  of  Sept.  11. 


when  the  pool  of  U.S.  citizens 
with  IT  skills  is  shrinking 
rapidly  and  many  companies 
are  off-setting  higher  salaries 
demanded  by  U.S.  workers 
with  overseas  talent. 

“When  you  look  at  the  nor¬ 
mal  pool  of  available  IT  peo¬ 
ple,  we  have  a  big  problem,” 
said  Anthony  Valetta,  former 
acting  assistant  secretary  of 
defense  and  currently  a  vice 
president  at  SRA  International 
Inc.,  a  defense  contractor  in 
Fairfax,  Va. 

‘A  Bigger  Problem’ 

“Those  people  are  not  your 
average  American  kids  any¬ 
more,”  said  Valetta.  “If  this 
happens  beyond  the  DOD,  we 
have  a  bigger  problem  on  our 
hands.” 

That’s  exactly  what  some 
business  executives,  like  Vince 
Coll,  president  of  iConcepts 
Inc.,  an  IT  outsourcing  firm  in 


Lansdale,  Pa.,  fear  most.  A  gov¬ 
ernmentwide  ban  on  nonciti¬ 
zens  would  significantly  drive 
up  the  costs  for  many  compa¬ 
nies  that  now  do  a  lot  of  soft¬ 
ware  development  offshore,  he 
said. 

“The  whole  industry  would 


be  severely  damaged,  as  would 
the  government,”  said  Coll, 
whose  company  lost  a  bid  to  be 
a  subcontractor  to  a  major  de¬ 
fense  firm  because  iConcepts 
software  code  was  written  in 
Bulgaria. 

Chip  Mather,  a  defense  ac¬ 


quisition  analyst  at  Acquisition 
Solutions  Inc.  in  Chantilly,  Va., 
said  such  a  policy  would  be  al¬ 
most  impossible  to  impose  due 
to  the  makeup  of  the  current 
IT  labor  pool  and  the  fact  that 
a  lot  of  software  development 
and  related  tasks  are  done 
overseas  and  not  in  DOD  facili¬ 
ties.  “I’d  be  more  concerned 
about  the  coders  than  I  would 
be  about  the  people  on-site,” 
said  Mather.  However,  he 
added,  “there’s  no  direct  corre¬ 
lation  between  citizenship  and 
a  person’s  desire  not  to  commit 
espionage.” 

Miller  reiterated  that  mes¬ 
sage  in  his  letter  to  the  Penta¬ 
gon.  “Public  policy  must  be 
based  on  real-world  actions 
and  tangible  threats  —  not  sup¬ 
position  and  innuendo,”  he 
wrote.  “During  the  1990s,  [U.S.] 
citizens  perpetrated  several  of 
the  most  damaging  intelligence 
leaks  in  U.S.  history.”  I 


Kleinfelder  wasn’t  paying  too 
much  money. 

Paris  said  the  result  was 
a  proposal  that  Kleinfelder 
switch  from  named  user  to  per- 
processor  pricing,  with  Oracle 
citing  the  fact  that  the  company 
has  more  licensed  users  for  its 
Web-based  applications  than  it 
does  for  the  database  itself.  But 
the  switch  would  increase  Kle- 
infelder’s  database  license  and 
support  costs  from  $7,000  to 
$212,000,  according  to  Paris. 

“As  far  as  I  am  concerned, 
we  are  not  going  to  do  any¬ 
thing  right  now,”  Paris  said. 
But,  he  added,  he  assumes  that 
the  licensing  situation  “is  far 
from  being  resolved.” 

‘A  Dangerous  Precedent’ 

Last  week’s  controversy  be¬ 
gan  when  Stamford,  Conn.- 
based  consulting  firm  Meta 
Group  Inc.  issued  a  statement 
saying  that  some  of  its  clients 
were  upset  by  what  it  claimed 
was  a  decision  by  Oracle  to 
change  the  way  it  defines  a 
process  known  as  multiplexing 
(see  story  at  right). 

In  a  statement,  Meta  Group 
analyst  Charlie  Garry  de¬ 
scribed  the  alleged  new  inter¬ 
pretation  as  “bizarre”  and  said 
Oracle  appeared  to  be  using  it 
to  try  to  get  additional  revenue 


from  its  installed  base.  The 
consulting  firm  urged  users  to 
resist  any  attempts  by  Oracle 
to  increase  their  license  fees 
because  of  the  multiplexing  is¬ 
sue,  “in  court  if  necessary.” 

If  Meta  Group’s  claims  are  ac¬ 
curate,  Oracle  could  be  setting 
“a  dangerous  precedent”  that 
could  result  in  unreasonable 
software  license  costs  for  users, 
said  Jim  Prevo,  CIO  at  Green 
Mountain  Coffee  Inc.  in  Water- 
bury,  Vt.  It  has  named  user 
database  licenses  but  hasn’t 
been  audited  by  Oracle,  he  said. 

Woods  claimed  that  Meta 
Group  misunderstood  the 
terms  of  Oracle’s  licensing  poli¬ 
cy.  She  accused  the  consulting 
firm  of  giving  its  clients  erro¬ 
neous  advice  and  insisted  that 
Oracle  treats  its  customers 
fairly. 

“We’re  not  especially  tough 
[on  users],  but  it’s  very  clear 
that  if  you  have  500  named 
users  and  only  license  200,  you 
are  out  of  compliance,”  Woods 
said.  “If  you  are  out,  we’re  go¬ 
ing  to  work  with  you  to  get  you 
in  compliance.” 

But  three  other  analysts  said 
they  have  heard  similar  reports 
about  Oracle  trying  to  squeeze 
more  revenue  out  of  its  users. 
The  Meta  Group  claims  were 
“correct  insofar  as  what  is  hap¬ 


pening  in  the  field,”  said  Betsy 
Burton,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.  “We’re 
absolutely  seeing  Oracle  try 
and  charge  customers  in  all 
sorts  of  different  ways.” 

Woods  said  15%  to  20%  of  Or¬ 
acle’s  database  customers  have 


The  licensing  controversy  re¬ 
volves  around  a  somewhat  eso¬ 
teric  issue:  the  use  of  multiplexing 
software  by  companies  that  have 
named  user  database  licenses. 

Meta  Group  analyst  Charlie 
Garry  said  multiplexing  usually  in¬ 
volves  using  Web  server  software 
or  a  transaction  processing  en¬ 
gine  to  provide  a  shared  pool  of 
connections  to  a  database.  That 
can  mask  the  true  number  of  end 
users  who  tap  into  the  database 
and  should  have  licenses. 

But  now,  Garry  said,  it  appears 
that  Oracle  is  expanding  the  defin¬ 
ition  of  multiplexing  to  include 
batch  feeds  of  data  from  non-Ora¬ 
cle  applications  into  its  databases. 

That  interpretation  could  par¬ 
ticularly  affect  companies  that  use 
Oracle  databases  to  warehouse 
information  from  a  variety  of 
source  applications,  Garry  said. 
Previously,  a  batch  feed  was  cov¬ 
ered  by  the  cost  of  a  single  named 


named  user  licenses,  which  cost 
$800  per  user  for  the  enterprise 
edition  of  the  software.  By  con¬ 
trast,  the  processor-oriented 
pricing  that  Oracle  announced 
last  June  to  replace  a  controver¬ 
sial  capacity-based  approach 
costs  $40,000  per  CPU.  I 


user  license,  he  claimed. 

But  some  Meta  Group  clients 
have  reported  that  Oracle  is  now 
saying  that  batch  feeds  qualify  as 
multiplexing  software,  requiring 
them  to  buy  licenses  for  all  the 
users  of  the  source  applications. 
One  company  was  told  that  it 
would  have  to  pay  $2.2  million  to 
become  compliant,  Garry  said. 

However,  Jacqueline  Woods, 
vice  president  of  global  practices 
at  Oracle,  said  the  software  ven¬ 
dor's  multiplexing  policy  has  re¬ 
mained  consistent  for  the  past 
several  years.  Only  end  users  or, 
in  some  rare  cases,  devices  such 
as  routers  and  switches  are  con¬ 
sidered  eligible  for  named  user 
status,  she  said. 

In  a  statement,  Oracle  said 
users  who  are  affected  by  the 
multiplexing  issue  should  contact 
its  pricing  department  “for  further 
clarification  and  resolution." 

-  Marc  L.  Songini 


Multiplexing  Software  Fuels  Controversy 
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Home  Depot  Picks 
IBM  Middleware,  DB2 

The  Home  Depot  Inc.  said  it  plans  to 
use  IBM’s  WebSphere  middleware 
technology  as  the  foundation  of  a 
new  IT  architecture  for  its  corporate 
systems  and  business-to-business 
applications.  The  Atlanta-based 
home  improvement  retailer  will  also 
use  IBM’s  DB2  database  as  part  of 
the  new  setup.  Financial  details  of 
the  contract  between  the  two  com¬ 
panies  weren’t  disclosed. 

Hacker  Hits  Server 
At  Georgia  Tech 

The  Georgia  Institute  of  Technology 
disclosed  that  a  hacker  broke  into  a 
server  that  contained  financial  data 
about  its  employees,  including  some 
credit  card  numbers.  State  and  fed¬ 
eral  authorities  are  investigating 
the  incident,  and  a  Georgia  Tech 
spokesman  said  IT  staffers  at  the 
Atlanta-based  university  have  taken 
steps  to  limit  access  to  the  system 
since  the  break-in  occurred. 


Sun  Adds  Web  Server 
Tools  to  Unix  Server 

Sun  Microsystems  Inc.  said  its 
iPlanet  Web  server  software  is  now 
packaged  with  its  sub-$1,000  Unix 
server,  the  Sun  Fire  VIOO.  The  sin¬ 
gle-processor  system,  formerly 
called  Netra  XI,  starts  at  S995 
and  also  now  includes  a  CD-ROM 
drive.  Sun’s  move  follows  Hewlett- 
Packard  Co.’s  introduction  earlier 
this  month  of  a  rival  Unix  server 
that  starts  at  less  than  SI, 000. 

Shorttakes 

Houston-based  BMC  SOFTWARE 
if'!;  .  announced  an  “enablement  re¬ 
lease”  of  its  Patrol  systems  man¬ 
agement  software  that  includes  new 
installation  tools  and  support  for 
additional  features  that  are  due  this 
summer. . . .  San  Mateo,  Calif.- 
scn  c  P,:>HANY  INC.  upgraded  its 
sake  customer  relationship 
v  nagement  software. 
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JavaOne  to  Focus  on 
Web  Services  Tools 

IBM ,  Sun,  BE  A  try  to  lure  users  away  from 
Microsoft's  .Net  development  environment 


BY  CAROL  SLIWA 

ew  corporate  users 
have  rushed  to  build 
Web  services,  but  that 
won’t  stop  scores  of 
vendors  at  this  week’s 
JavaOne  conference  from  posi¬ 
tioning  their  platforms  as  bet¬ 
ter  for  developing  those  ser¬ 
vices  than  Microsoft  Corp.’s 
rival  .Net  environment. 

JavaOne  sponsor  Sun  Mi¬ 
crosystems  Inc., 
along  with  IBM 
and  San  Jose-based 
BEA  Systems  Inc., 
will  lead  a  charge  of  vendors 
announcing  product  enhance¬ 
ments  and  tools  in  support  of 
Web  services.  These  services 
are  aimed  at  helping  compa¬ 
nies  integrate  internal  applica¬ 
tions  and  link  to  business  part¬ 
ners’  external  applications  and 
services  through  XML-based 
messages  sent  via  the  Simple 
Object  Access  Protocol. 

Microsoft’s  rivals  see  this 
week’s  conference  as  an  oppor¬ 
tunity  to  try  to  silence  critics 
who  claim  that  they  have  fallen 
behind  in  their  support  of 
emerging  Web  service  tech¬ 
nologies.  Simon  Phipps,  Sim’s 
chief  Java  technology  evange¬ 
list,  said  the  Web  service  stan¬ 
dards  work  performed  through 
the  Java  Community  Process 
took  time,  but  “now,  at  JavaOne, 
you’re  beginning  to  see  the 
outpouring  of  announcements 
that  flow  from  having  defined 
standards  for  Web  services.” 

Microsoft  threw  down  the 
gauntlet  earlier  this  year,  claim¬ 
ing  that  its  newly  released 
Visual  Studio  .Net  environ¬ 
ment  is  the  best  and  most  eco¬ 
nomical  platform  for  building 
Web  services. 

Meanwhile,  the  Java  forces 
are  releasing  only  an  early- 
access  version  of  a  Web  ser¬ 
vices  development  package 
that  contains  application  pro¬ 


gramming  interfaces  (API)  for 
XML-based  parsing,  messaging 
and  remote  procedure  calls. 
The  API  package  will  be  built 
into  the  1.4  edition  of  Java  2  En¬ 
terprise  Edition  (J2EE),  but 
that’s  not  expected  to  be  final¬ 
ized  until  the  first  quarter  of 
next  year,  Sun  officials  said. 

Several  analysts  said  that 
Java  vendors  should  catch  up 
within  a  year  and  that  they 
don’t  expect  Micro¬ 
soft  to  gain  an  over¬ 
whelming  advan¬ 
tage  from  its  earlier 
foray  into  Web  services. 

It’s  not  a  huge  factor  now 
anyway,  since  few  users  have 
gotten  beyond  the  exploration 
stage  with  Web  services.  Cur¬ 
tis  Chambers,  a  senior  IT  man¬ 
ager  at  The  Home  Depot  Inc. 
in  Atlanta,  said  he  will  consid¬ 
er  a  Web  services  model  for 
exchanging  information  with 


vendor  partners.  But  right  now, 
Home  Depot  is  focused  on 
rolling  out  its  new  IBM  Web¬ 
Sphere  application  server  and 
getting  up  to  speed  on  Enter¬ 
prise  JavaBeans. 

“We  really  haven’t  focused 
on  Web  services,”  Chambers 
said.  “I  think  that’s  going  to  be 
in  the  next  year,  once  we  get 
the  J2EE  stuff  out  there.” 

Right  now,  IBM  is  releasing 
a  free,  private  Universal  De¬ 
scription,  Discovery  and  Inte¬ 
gration  (UDDI)  registry  that 
companies  can  use  behind  their 
firewalls  to  store  information 
about  the  way  applications  can 
interoperate  with  one  another. 

Scott  Crosby,  manager  of 
WebSphere  business  process 
integration,  said  IBM  is  re¬ 
sponding  to  customers  who 
said  they  want  to  experiment 
internally  with  Web  services 
before  they  consider  using 
public  UDDI  registries. 

IBM  today  will  also  launch  a 
WebSphere  Studio  Integration 
Edition  tool  that  gives  develop¬ 
ers  a  visual  drag-and-drop  en- 


What’s  on  Tap 

Announcements  at  this  week’s 
JavaOne  conference  in  San 
Francisco  will  focus  on: 

■  Building  Web  services  with  the 
Java  platform,  software  and  tools 

■  Certified  support  for  J2EE  1.3 
in  application  servers  and  tools 

■  Tools  to  ease  and  manage 
J2EE  programming 

■  J2EE  connectors  to  link  Java 

applications  to  non-Java  applica¬ 
tions  from  vendors  such  as  SAP 
A6  and  PeopleSoft  Inc. 

■  Java  uptake  in  wireless  and 
mobile  devices 


vironment  to  build  applica¬ 
tions  or  Web  services  that  can 
connect  Java  applications  to 
each  other,  non-Java  applica¬ 
tions  or  Web  services.  In  con¬ 
junction  with  the  release  of  the 
new  tool,  IBM  is  shipping  Ver¬ 
sion  4.1  of  its  WebSphere  appli¬ 
cation  server. 

BEA,  meanwhile,  will  offi¬ 
cially  turn  over  its  file  format 
for  describing  Web  services  — 
which  is  the  basis  for  the  run¬ 
time  framework  of  its  new 
WebLogic  Workshop  tool  —  to 
Sun’s  Java  Community  Process 
for  standardization.  ft 


IBM,  Sun  Spearhead  Portal  Interoperability  Standards  Effort 


Corporate  users  who  are  hoping  for  a  standard  way  to 
infuse  content  into  their  portals  may  get  some  relief  late 
this  year. 

IBM  and  Sun  Microsystems  today  will  announce  a 
joint  effort  to  spearhead  the  creation  of  a  Java  specifi¬ 
cation  to  define  an  API  for  building  portlets,  the  snip¬ 
pets  of  code  that  permit  applications  or  content  to 
be  integrated  into  portals,  said  Tim  Thatcher,  program 
director  of  portal  solutions  at  IBM. 

Portals  are  central  Web  sites  that  can  pull  content 
from  a  wide  range  of  internal  and  external  sources, 
including  enterprise  resource  planning  and  customer 
relationship  management  applications,  mail  servers 
and  other  Web  sites. 

“The  portal  product  market  has  been  suffering  from 
a  lack  of  interoperability  standards  since  its  creation 
four  years  ago,”  said  Gene  Phifer,  an  analyst  at  Stam¬ 
ford,  Conn. -based  Gartner  Inc.  “This  is  going  to  be 
the  first  baby  step  toward  interoperability  standards 
for  portals." 

Craig  Harrison,  director  of  shared  services  and  world 
headquarters  information  systems  at  The  Boeing  Co.  in 
Chicago,  which  has  lent  its  official  support  to  the  portal 
standards  effort,  said  his  company  buys  content  and 


then  must  use  a  proprietary  format  to  get  that  content  to 
appear  in  its  portal  from  San  Francisco-based  Plumtree 
Software  Inc. 

Harrison  said  his  firm  would  rather  buy  access  to 
the  content  and  not  have  to  write  code.  That  would  be 
easier  if  content  providers  could  write  to  one  standard, 
rather  than  having  to  write  to  the  proprietary  formats  of 
the  different  portal  vendors,  he  noted. 

A  portal  standard  could  also  prove  useful  if  a  portal 
software  vendor  went  out  of  business,  Harrison  added. 

Other  companies  supporting  the  portal  standards 
effort  include  DaimlerChrysler  AG,  BEA,  Hewlett- 
Packard  Co.,  Oracle  Corp.  and  SAP  AG. 

Phifer  noted  that  a  parallel  portal  standards  effort  is 
under  way  through  the  Billerica,  Mass.-based  Organiza¬ 
tion  for  the  Advancement  of  Structured  Information 
Standards  (OASIS),  a  nonprofit  industry  consortium  that 
develops  XML-based  interoperability  specifications. 

The  OASIS  portal  effort  aims  to  “create  an  XML  and 
Web  services  standard  that  will  allow  for  the  plug-and- 
play  of  portals,  other  intermediary  Web  applications 
that  aggregate  content  and  applications  from  disparate 
sources,”  according  to  the  OASIS  Web  site. 

-  Carol  Sliwa 


WEBSERVIGES 


When  seldom  is  heard  a  discouraging  word,  chances  are  it’s  because  your  customer 
relationships  are  running  efficiently  and  profitably.  With  J.D.  Edwards  solutions  and 
services  for  Customer  Relationship  Management,  you’re  able  to  leverage  customer  knowledge 

and  experience  to  build  even  more  profitable  relationships.  Find  out  how  to  . 

soundproof  your  company.  Call  1-888-895-6402  now  and  ask  for  our  CRM  Info  Packet  j  D  E  D  W  ARDS 

Ior  go  to  www.jdedwards.com/peace. 
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Microsoft  and  NetlQ  make  it  easier  to  manage  your  entire  Windows 
.  r  environment.  You've  got  servers  running  Windows®  2000  here, 
servers  running  Windows  NT*  in  the  next  building,  and  a  mix  of  platforms 
running  in  your  plants  overseas.  Managing  a  global-class  enterprise  sure 
means  a  lot  of  running. 

Which  is  why  Microsoft  and  NetlQ  teamed  up  to  deliver  a  way  to  manage 


your  entire  Windows  Server  environment  from  one  very  convenient  place:  your 
desk.  It  starts  with  Microsoft"  Operations  Manager  2000,  the  most  effective 
way  to  manage  all  your  Windows  2000-based  servers  and  applications,  from 
proactive  alerting  to  performance  monitoring  to  event  collection  and  reporting. 

By  adding  NetlQ  Extended  Management  Pack  modules,  you  can  also 
monitor  Windows  NT  4.0  as  well  as  other  Microsoft  servers;  mission-critical 


-on  C .xx*  ana  NetlQ  Corporation  A*  rights  reserved  Microsoft.  W  ncows.  and  Windows  N'T  are  Mhei  registered  trademarks  or  trademarks  of  Microsoft  Corporation  m  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  hereto  may  De  the  trademarks  of  their  respective  owners 
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applications  like  Oracle  RDBMS  and  Lotus  Domino;  and  large-scale  enterprise 
platforms  like  UNIX  and  NetWare.  All  from  one  centralized  console. 

Which  means  that  you  spend  a  lot  less  time  running  around  your 
enterprise,  and  a  lot  more  time  simply  and  effectively  managing  it.  Get  a 
head  start  on  reducing  your  management  burden  with  a  visit  to  netiq.com 
/manageability  today.  Software  for  the  Agile  Business. 


Microsoft 
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Sun  Takes  Over  iPlanet 
As  Partnership  Ends 


Observers  predict  that  software,  users 
may  receive  more  focused  attention  now 


AT  A  GLANCE 


BY  TODD  R.  WEISS 

UN  MICROSYSTEMS 
Inc.  last  week  formal¬ 
ly  took  sole  control 
of  the  iPlanet  e-com¬ 
merce  and  middle¬ 
ware  software  it  had  jointly  de¬ 
veloped  with  Netscape  Com¬ 
munications  Corp.  for  the  past 
three  years.  Some  users  and 
analysts  said  the  move  could 
give  iPlanet  a  needed  shot  in 
the  arm. 

Sun  and  Netscape  dissolved 
their  Mountain  View,  Calif.- 
based  iPlanet  E-Commerce  So¬ 
lutions  joint  venture  effective 
March  17,  hewing  to  plans  that 
were  disclosed  last  fall  by  Sun 
executives.  The  iPlanet  opera¬ 
tion  is  now  a  division  of  Sun, 
which  owns  all  intellectual 
property  rights  to  the  software. 

Sun  plans  to  solidify  the 
standing  of  iPlanet’s  technol¬ 
ogy  as  a  core  component  of  its 
Sun  Open  Net  Environment 
software  line,  according  to  a 


letter  that  was  sent  to  cus¬ 
tomers  by  Sun  CEO  Scott  Mc- 
Nealy  two  days  before  the  al¬ 
liance  with  Netscape  ended. 

The  iPlanet  products  include 
e-commerce  software  and  mid¬ 
dleware  tools  such  as  applica¬ 
tion,  directory,  messaging  and 
Web  servers.  In  his  letter,  Mc- 
Nealy  said  iPlanet  is  “critical  to 
Sun”  and  described  the  ven¬ 
ture  with  Netscape  as  “a  re¬ 
markable  success.” 

Companies  Didn't  Gell 

But  David  Smith,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.,  said  the  partnership  be¬ 
tween  Sun  and  the  AOL  Time 
Warner  Inc.  subsidiary  turned 
out  to  not  be  as  good  a  fit  as  the 
companies  had  hoped. 

“The  alliance  did  not  live  up 
to  its  potential,”  Smith  said, 
adding  that  Sun  and  Netscape 
never  fully  gelled  with  one  an¬ 
other.  Some  iPlanet  applica¬ 
tions,  such  as  the  e-mail  and 


IPlanet 

Alignment 

The  iPlanet  line  includes  the 
following  key  technologies: 

Application  Server:  Java  2  Enterprise 
Edition-based  software  for  use  in  devel¬ 
oping  and  managing  e-commerce  appli¬ 
cations 

Directory  Server:  A  central  repository  for 
storing  and  managing  user  identity  profiles 
and  access  privileges 

Portal  Server:  A  tool  that  supports  the  de¬ 
ployment  of  Web-based  portal  applications 

Web  Server,  Enterprise  Edition:  Soft¬ 
ware  targeted  at  use  in  running  corporate 
e-commerce  Web  sites 


directory  servers,  have  been 
commercially  successful,  but 
others  haven’t  done  as  well  in 
the  market,  Smith  said. 

For  iPlanet  users,  the  end  of 
the  alliance  probably  won’t 
produce  any  immediate  nega¬ 
tive  changes,  Smith  said.  In¬ 
stead,  he  predicted,  the  soft¬ 
ware  will  likely  get  more  fo¬ 
cused  attention  now  that  it’s 
being  developed  solely  by  Sun. 


That’s  the  prevailing  view  at 
the  Chicago-based  American 
Hospital  Association,  which  is 
installing  Sun  hardware  and 
iPlanet  software  to  set  up  a 
unified  server  farm  and  single 
end-user  portal  for  38  Web 
sites  that  are  operated  by  dif¬ 
ferent  groups  under  its  organi¬ 
zational  umbrella. 

The  breakup  of  the  alliance 
with  Netscape  won’t  affect 
those  plans,  said  Herman  Bau¬ 
mann,  the  association’s  execu¬ 
tive  director  of  business  de¬ 
velopment.  “If  anything,  it’s 
been  better  because  we’ve 
been  able  to  work  [more  di¬ 
rectly  with  Sun]  on  a  cohesive 
basis,”  Baumann  said,  referring 
to  changes  that  were  made  in¬ 
formally  before  the  breakup 
became  official. 

When  the  hospital  associa¬ 
tion  was  weighing  what  soft¬ 
ware  to  use  as  part  of  the  proj¬ 
ect,  the  joint  venture  “didn’t 
play  a  role  in  whether  we  went 
with  iPlanet  or  not,”  he  added. 

IPlanet  E-Commerce  Solu¬ 
tions  began  as  an  alliance  be¬ 
tween  Sun  and  Netscape  to  de¬ 
velop  a  software  platform  for 
the  creation  and  delivery  of 
Web  services.  Sun  said  the  ven¬ 
ture  was  ended  under  terms  set 
when  the  deal  was  first  signed. 
Under  the  agreement,  iPlanet’s 
employees  will  be  fully  under 
the  wing  of  Sun.  Financial  de¬ 
tails  weren’t  disclosed.  I 


Free  Ride  Ends  for  StarOffice  Suite,  but  Support  Starts 


After  giving  away  its  StarOffice 
desktop  applications  for  the  past 
two  years.  Sun  last  week  said  it  will 
begin  charging  for  the  software  in 
May  But  the  company  also  plans  to 
add  a  set  of  fee-based  support  ser¬ 
vices  aimed  at  corporate  users. 

That’s  a  big  change  for  Sun, 
which  doesn’t  offer  technical  sup¬ 
port,  migration  help  or  other  ser¬ 
vices  with  the  free  versions  of 
StarOffice  that  can  be  downloaded 
from  its  Web  site.  Sun  officials  said 
fhe  lack  of  support  capabilities  is 
making  it  harder  to  persuade  IT 
managers  to  choose  StarOffice 
over  Microsoft  Corp.’s  Office  suite. 

The  importance  of  support  was 
hammered  home  to  Sun  by  users 
who  are  beta-testing  the  upcoming 
StarOffice  6.0. 

CIOs  “are  uneasy  about  [adopt¬ 


ing]  a  product  without  support  and 
training  for  their  IT  staffs,”  said 
Mike  Rogers,  vice  president  of 
desktop  and  office  productivity  ap¬ 
plications  at  Sun.  "Our  beta-testers 
told  us  they  wouldn’t  standardize 
on  a  product  without  that.” 

On  the  other  hand,  users  said 
they  would  be  willing  to  pay  for  the 
software  if  Sun  offered  support  ser¬ 
vices,  Rogers  added.  With  the  new 
plan,  “we’ve  responded  to  the  feed¬ 
back,”  he  said.  “We  want  people  to 
use  this  product.” 

For  corporate  users,  the  new  ap¬ 
proach  will  institute  what  Sun  de¬ 
scribed  as  “a  nominal  charge”  for 
StarOffice  based  on  a  tiered,  per¬ 
user  pricing  model.  A  Web-based 
user  training  tool  will  be  bundled 
with  the  software. 

Services  such  as  help  desk 


training,  direct  end-user  support 
and  deployment  assistance  will  be 
offered  on  a  contract  basis.  Pricing 
will  be  announced  when  StarOffice 
6.0  is  released,  Sun  said. 

Rob  Enderle,  an  analyst  at  Giga 
Information  Group  Inc.  in  Cam¬ 
bridge,  Mass.,  said  he  agrees  that 
charging  for  the  software  could 
give  Sun  credibility  among  corpo¬ 
rate  IT  managers  who  might  have 
overlooked  the  free  version. 

“The  problem  with  a  free  prod¬ 
uct  is  that  no  one  really  believes 
you’re  going  to  stick  with  it,”  End¬ 
erle  explained. 

Sun's  timing  could  be  right  be¬ 
cause  many  corporate  users  are 
still  angry  at  the  new  licensing  fees 
that  Microsoft  implemented  on  its 
Office  software  last  year,  he  added. 
“The  customers  took  it  as  a  tax  in¬ 


crease”  for  using  Microsoft’s  prod¬ 
ucts,  Enderle  said. 

But  Joshua  Greenbaum,  an  ana¬ 
lyst  at  Enterprise  Applications  Con¬ 
sulting  in  Daly  City,  Calif.,  said  it  will 
still  be  hard  to  compete  with  Office. 
Microsoft’s  desktop  applications 
monopoly  is  so  well  established 
that  StarOffice  “could  have  been 
the  world’s  greatest  office  suite, 
and  it  still  wouldn’t  have  made  a 
dent,”  Greenbaum  said. 

Users  who  don't  want  to  buy 
StarOffice  won’t  be  completely  left 
out  in  the  cold.  Free  downloads  of  a 
less  sophisticated  open-source 
version  of  the  software  will  still  be 
available  on  the  Sun-sponsored 
Web  site  at  www.openoffice.org. 

-  Todd  R.  Weiss 


Tom  Krazit  of  the  IDG  News 
Service  contributed  to  this 
report. 


Mors  Pull 
Proposal  on 
Bug  Reports 

IETF  members  object 
to  lack  of  prior  input 

BY  LINDA  ROSENCRANCE 

The  authors  of  proposed  guide¬ 
lines  on  how  software  security 
holes  should  be  reported  to  ven¬ 
dors  and  fixed  have  withdrawn 
the  document  from  the  Inter¬ 
net’s  main  standards-setting 
body,  the  Internet  Engineering 
Task  Force  (IETF). 

The  draft  proposal  aims 
to  settle  an  ongoing  dispute 
among  software  vendors,  users 
and  security  analysts  over  pub¬ 
lic  disclosures  of  vulnerabili¬ 
ties  in  products.  It  gives  ven¬ 
dors  30  days  to  resolve  soft¬ 
ware  flaws  before  any  disclo¬ 
sures  are  made  but  also  allows 
them  to  request  extensions. 

The  proposal  was  withdrawn 
because  there  was  no  con¬ 
sensus  among  IETF  members 
about  the  need  for  such  guide¬ 
lines,  according  to  the  IETF 
and  Steve  Christey,  lead  infor¬ 
mation  security  engineer  at 
Mitre  Corp.  in  Bedford,  Mass. 
Christey  is  one  of  the  two  au¬ 
thors  of  the  proposal. 

In  addition,  IETF  members 
weren’t  pleased  that  the  docu¬ 
ment,  called  the  Responsible 
Vulnerability  Disclosure  Proc¬ 
ess,  was  submitted  to  the 
group  without  first  soliciting 
its  opinions.  The  authors  of  the 
proposal  “didn’t  want  input,” 
said  Jeffrey  Schiller,  area  direc¬ 
tor  for  security  within  the 
IETF.  “We’re  open  to  input. 
We’re  not  a  rubber  stamp.” 

Christey  said  the  authors 
consulted  10  individuals  and 
organizations,  including  Micro¬ 
soft  Corp.,  while  they  were 
preparing  their  proposal.  He 
said  they  planned  to  consult 
with  IETF  security  officials  be¬ 
fore  submitting  the  document 
but  were  unable  to  do  so  be¬ 
cause  the  draft  was  leaked  to 
the  public.  I 


Productivity  is 


effort 


Consider  the  facts.  According  to  IDC,  for  every  1 ,000  knowledge  workers,  your 
enterprise  wastes  $7.5  million  a  year  looking  for  and  reworking  information  that  already  exists. 

Inktomi  can  help.  Our  XML-enabled  knowledge  retrieval  solutions,  tightly  integrated  with  your 
business  critical  applications,  allow  people  to  find  and  react  in  real-time  to  information  spread 
across  your  global  enterprise.  By  connecting  the  right  content  to  the  right  person  at  the  right  time, 
Inktomi  makes  your  organization  far  more  efficient  and  competitive.  Best  of  all,  Inktomi  requires 
minimal  IT  resources  to  deploy  and  maintain,  delivering  an  extremely  low  total  cost  of  ownership. 

For  the  most  effective  real-time  information  management,  insist  on  Inktomi®  Enterprise  Search. 

It's  just  one  of  a  comprehensive  suite  of  scalable  network  infrastructure  applications  many  of 
the  leading  FORTUNE  1000  companies  regard  as  essential  to  their  enterprises. 

You’ll  find  it  essential  to  yours. 
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www.inktomi.com/search 


Copyright  ©  2002  Inktomi  Corporation  AM  rights  reserved.  Inktomi,  the  tri-cotored  cube  logo  and  the  Inktomi  essential  iogo  are  trademarks  or  registered  trademarks  of  Inktomi  Corporation  in  the  United  States  and  other  countries.  All  other  trademarks  are  the  property  of  their  respective  owners. 


Network  Associates 
Bids  for  McAfee.com 


Network  Associates  Inc.  said  it  will 
offer  to  buy  the  remaining  publicly 
held  shares  in  McAfee.com  Corp.  as 
part  of  a  plan  to  turn  the  Sunnyvale, 
Calif.-based  antivirus  software  firm 
into  a  wholly  owned  subsidiary. 
Santa  Clara,  Calif.-based  Network 
Associates  currently  owns  about 
75%  of  McAfee.com’s  stock.  The 
stock-swap  offer  is  due  to  be  filed 
this  week. 

Sun  Buys  Server 
Clustering  Developer 

Sun  Microsystems  Inc.  acquired 
Clustra  Systems  Inc.,  an  Oakland, 
Calif.-based  developer  of  server 
clustering  software.  Clustra’s  high- 
availability  technology  will  be  built 
into  Sun’s  iPlanet  Application  Serv¬ 
er  software  and  will  eventually  be 
added  to  other  tools  within  the  Sun 
Open  Net  Environment  product  line. 
Financial  details  of  the  acquisition 
weren’t  disclosed. 

PC  Reseller  Settles 
Microsoft  Lawsuit 

Merrimack,  N.H.-based  PC  Connec¬ 
tion  Inc.  settled  a  lawsuit  filed  by 
Microsoft  Corp.  over  alleged  sales 
of  counterfeit  software.  PC  Connec¬ 
tion  denied  the  charges  but  agreed 
to  pay  Microsoft  S625.000.  In  a 
separate  matter,  a  U.S.  District 
Court  judge  in  Seattle  denied  a  re¬ 
quest  from  Microsoft  for  an  injunc¬ 
tion  biocking  Lindows.com  Inc.  in 
San  Diego  from  selling  an  operating 
system  under  the  name  Lindows. 
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Short  Takes 

Isiandia,  N.Y.-based  COMPUTER 
ASSOCIATES  INTERNATIONAL  INC. 
completed  a  private  offering  of 
$880  million  worth  of  convertible 

nates _ Hamilton,  Bermuda- 

ased  consulting  firm  ACCENTURE 
t  il  said  it  will  report  higher-than- 
sspected  operating  results  for  its 
second  quarter  ended  Feb.  28. 


NEWSINDUSTRY 

EMC  Seeks  Dell’s  Aid 
On  Production  Costs 


Duo  considers  expanding  midrange 

resale  deal  to  include  manufacturing 


BY  LUCAS  MEARIAN 

mc  corp.’S  strategic 
focus  on  big-ticket 
disk  arrays  has  put  it 
in  a  tough  sales  posi¬ 
tion  during  the  cur¬ 
rent  period  of  corporate  belt¬ 
tightening.  Now,  the  storage 
vendor  is  looking  to  Dell  Com¬ 
puter  Corp.  for  help  in  reduc¬ 
ing  the  production  costs  on  its 
Clariion  midrange  arrays. 

Five  months  after  announc¬ 
ing  that  Dell  would  resell  Hop- 
kinton,  Mass.-based  EMC’s 
Clariion  devices,  the  two  com¬ 
panies  last  week  said  they’re 
discussing  the  idea  of  having 
the  computer  maker  take  over 
some  of  the  manufacturing  of 
the  Clariion  product  line. 

Nothing  has  been  finalized, 
but  EMC  said  it  wants  to  take 
advantage  of  Dell’s  volume 
manufacturing  capabilities  as 
part  of  its  effort  to  win  back 
market  share  that  it  has  lost  to 
storage  rivals  such  as  IBM  and 
Compaq  Computer  Corp. 

“What  Dell  is  good  at  is  tak¬ 
ing  components  and  manufac¬ 
turing  systems  that  are  com¬ 
modities  and  spitting  them  out 
in  volume,”  said  EMC  spokes¬ 
man  Michael  Gallant.  “They 
have  great  purchasing  power 
and  supply  chain  ex¬ 
pertise.  That’s  what 
we’re  hoping  to 
leverage.” 

Gallant  noted  that 
EMC  makes  the  Clariion  arrays 
at  plants  in  Apex,  N.C.,  and 
Cork,  Ireland,  but  it  doesn’t 
have  any  production  facilities 
in  Latin  America  or  Asia.  Dell 
does,  he  said,  so  “one  could  de¬ 
duce  that  they  could  augment 
our  manufacturing  there.” 

Word  of  the  manufacturing 
talks  came  as  EMC  and  Dell 
jointly  announced  upgraded 
versions  of  three  Clariion- 
related  storage  management 
software  products  (see  box). 


EMC  acquired  the  Clariion 
line  when  it  bought  Data  Gen¬ 
eral  Corp.  three  years  ago.  But 
analysts  said  EMC’s  sales  of 
the  midrange  arrays  have  re¬ 
mained  sluggish,  due  partly  to 
the  company’s  emphasis  on  its 
high-end  Symmetrix  devices. 

Carolyn  DiCenzo,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.,  said  EMC  has  had  trou¬ 
ble  motivating  its  Symmetrix- 
oriented  sales  force  to  jump  on 
the  midrange  storage  band- 


Low-cost  file  server 
supports  centralized 
archiving  of  data 


BY  LUCAS  MEARIAN 

Expanding  its  product  line  be¬ 
yond  the  realm  of  primary 
storage  devices,  Network  Ap¬ 
pliance  Inc.  last  week  released 
the  first  member  of  a  planned 
family  of  enterprise-class  file 
servers  for  use  in 
centrally  backing  up 
data  from  systems  at 
multiple  sites. 
Sunnyvale,  Calif.- 
based  Network  Appliance  said 
the  NearStore  R100  can  take 
data  feeds  from  its  own  Net- 
App  filers  and  from  storage  de¬ 
vices  made  by  other  vendors. 
The  R100  scales  from  12TB  to 
96TB  and  is  aimed  at  giving 
users  a  single  system  for  doing 
backups  before  archiving  data 
on  tape. 

Jamie  Gruener,  an  analyst  at 
The  Yankee  Group  in  Boston, 
said  the  R100  is  Network  Ap¬ 
pliance’s  first  product  focused 


wagon  because  the  Clariion  ar¬ 
rays  have  lower  selling  prices. 

Letting  Dell  take  a  leading 
role  in  selling  Clariion  “makes 
a  lot  of  sense,”  DiCenzo  said. 
“EMC  needs  a  good  distributor 
for  the  Clariion  line.”  And  Dell 
is  very  effective  at  distributing 
products,  she  added. 

As  part  of  the  reseller  deal, 
which  was  announced  in  Octo¬ 
ber,  Dell  is  positioning  the 
Clariion  devices  for  use  by 
companies  with  mixed  instal¬ 
lations  of  servers  —  a  switch 
from  its  previous  strategy  of 
selling  storage  products  only 
to  users  with  Dell  machines. 

Frank  Frankovsky,  senior 


squarely  on  data  migration  and 
backup.  “What  they’re  doing  is 
offering  a  consolidated  backup 
appliance,”  he  said. 

That  sets  Network  Appli¬ 
ance  apart  from  rivals  such  as 
IBM  and  Hopkinton,  Mass.- 
based  EMC  Corp.  on  product 
positioning,  Gruener  said.  And 
the  RIOO’s  base  price  of 
$240,000  is  much  lower  than 
typical  disk  storage  costs  on  a 
per-megabyte  basis,  he  added. 

Dianne  McAdam,  an  analyst 
at  Nashua,  N.H.-based  Illumi- 
nata  Inc.,  said  Network  Appli- 


AT  A  GLANCE 


Not  Just 
Hardware 

Network  Appliance  also  intro¬ 
duced  the  following  storage 
management  tools: 

■  SnapMirror.  for  mirroring  selected  data 
sets  for  disaster  recovery  purposes 

■  SnapVault,  for  placing  data  “snapshots" 
on  a  central  repository 

■  SnapRestore,  for  recovering  files  from 
backup  copies  of  data 


STSSASE 

STRATEGIES 


Network  Appliance  Focuses 
On  Data  Backup  Devices 


COMPUTERWORLD  March  25, 2002 


Software  Support 

EMC  and  Dell  announced  the 
following  upgraded  software 
for  use  with  Clariion  arrays: 

C0NTR0LCENTER  NAVI- 
SPHERE  6.0:  A  Web-based  tool 
that  lets  IT  managers  remotely 
change  storage  configurations  and 
receive  alarms  about  problems. 

SNAPVIEW  VERSION  1.3:  A  data 
backup  tool  with  increased  capabili¬ 
ties  for  taking  “snapshots”  of  file  sys¬ 
tems  while  applications  are  in  use. 

MIRR0RV1EW  1.3:  A  data  mirror¬ 
ing  tool  with  new  disaster  recovery 
features  and  support  for  simultane¬ 
ously  copying  data  to  two  arrays. 


manager  of  Dell/EMC  product 
management  at  Dell,  said 
Clariion  users  can  set  up  a  full 
storage-area  network  built 
around  the  disk  arrays  for 
$70,000  to  $100,000. » 


ance  was  able  to  make  the  R100 
cheaper  by  using  less  expen¬ 
sive  disk  technology  than  it 
puts  in  its  flagship  network- 
attached  storage  devices. 

“These  are  not  as  high-per¬ 
forming  disks  as  you  would  see 
in  other  NetApp  filers,  and  the 
idea  is  that  they  don’t  have  to 
be  [because  of  the  focus  on 
backup  uses],”  McAdam  said. 

Network  Appliance  in  De¬ 
cember  detailed  its  plans  to 
field  a  line  of  backup  devices. 
As  part  of  last  week’s  release  of 
the  R100,  the  company  intro¬ 
duced  several  data  backup  and 
recovery  software  tools  for  use 
with  the  new  file  server  (see 
box).  Network  Appliance  said 
the  R100  will  also  work  with 
storage  management  software 
developed  by  10  other  vendors. 

Ray  Villeneuve,  vice  presi¬ 
dent  of  marketing  at  Network 
Appliance,  said  the  vendor 
hopes  to  convince  companies 
that  have  multiple  remote  of¬ 
fices  to  off-load  data  backup 
from  distributed  tape  libraries. 

In  addition  to  backup  appli¬ 
cations,  the  R100  can  be  used 
to  set  up  online  archives  of 
data  that  doesn’t  need  to  be  ac¬ 
cessed  frequently,  Network 
Appliance  said.  Examples  in¬ 
clude  product  design  draw¬ 
ings,  historical  financial  data 
and  billing  records.  ► 


Introducing  the  Mobile  Intel®  Pentium®  4  Processor  -  M. 


Do  more. 
Carry  less. 


M  is  here,  specifically 


Road  warriors  rejoice.  The  all-new  Mobile  Intel®  Pentium®  4  Processor 
designed  for  mobility.  Intel’s  Micro  FCPGA  packaging  technology  enables  thin  and  light  notebooks 
for  added  portability.  And  Enhanced  Intel®  SpeedStep™  Technology  optimizes  application  performance 
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for  long-lasting  battery  power.  For  more  about  the  fastest  mobile  processors  in  history,  visit 
www.intel.com/ebusiness/mobile 
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MARYFRAN  JOHNSON 


Dear  Carly  and  Michael, 


■OW  YOU  KNOW  how  A1  Gore  must 
have  felt.  All  that  politicking,  all  that 
ballot  counting,  all  that  nerve-racking 
uncertainty.  And  then  our  former  vice 
president  experienced  the  agony  of 
defeat  anyway.  But  if  the  final  HP  vote  tallies  really 
do  approve  this  megamerger,  you  two  will  be  mired 


in  a  different  sort  of 
agony.  You’ll  be  attempt¬ 
ing  the  biggest  computer 
company  merger  in  his¬ 
tory  with  two  weakened, 
battered  companies  and 
an  unusually  large  con¬ 
tingent  of  hostile,  demor¬ 
alized  employees. 

But  far  more  troubling 
is  the  growing  disen¬ 
chantment  of  your  cus¬ 
tomers. 

Six  months  ago,  opin¬ 
ion  surveys  of  CIOs  and  IT  man¬ 
agers  showed  a  relatively  small  per¬ 
centage,  maybe  15%,  opposing  this 
$21  billion  merger.  You  were  getting 
one  big  benefit  of  the  doubt  there, 
given  this  industry’s  lamentable  his¬ 
tory  of  botched  high-tech  mergers. 
But  when  we  surveyed  about  200  IT 
executives  at  Computer-world's  Pre¬ 
mier  100  IT  Leaders  conference  two 
weeks  ago,  closer  to  30%  were  nega¬ 
tive  on  this  deal.  In  another  poll  we 
conducted  online  among  senior  IT 
executives,  some  54%  of  them  said 
the  merger  “would  cause  them  to 
re-evaluate  doing  business”  with  a 
combined  HP/Compaq. 

You  know  why  their  faith  is  erod¬ 
ing?  Lack  of  information.  Lack  of  at¬ 
tention.  And  most  dangerously  for 
you  both,  a  perceived  lack  of  concern 
about  the  fate  of  their  IT  investments 
Ln  HP  and  Compaq  technologies. 

Of  course,  IT  pros  understand  why 
your  focus  has  been  locked  exclu- 

■  (  lv  on  shareholders,  institutional 
"v est ors  and  financial  analysts  for 
i  ic  cast  six  months.  They  also  real- 
'  c  >ur  hands  were  tied  by  SEC 
c.-ies  governing  mergers,  so  you 
\  uidn’t  talk  openly  about  the  fate 
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of  all  those  overlapping, 
competing  product  lines. 

That’s  all  changed  now. 
It’s  time  to  refocus  on 
your  customers  and  de¬ 
liver  what  they  need  from 
you.  For  starters,  show  us 
the  work  of  your  integra¬ 
tion  task  forces.  Go  pub¬ 
lic  with  those  fabled 
product  road  maps,  the 
ones  sketching  out  the 
next  three  years  of  inte¬ 
gration  and  combined 
product  development  plans.  Turn 
your  top  executives  loose  in  every 
key  product  segment  to  talk  honestly 
about  what  products  will  live  or  die. 
Deliver  specifics  about  the  migration 
plans  for  those  unlucky  customers  on 
the  losing  side  of  your  choices. 

Only  a  day  after  that  contentious 
HP  shareholder  vote  last  week,  ana¬ 
lysts  from  Gartner  were  issuing  pre¬ 


dictions  that  your  customers  could 
expect  a  “radical  housecleaning  of 
products,”  meaning  dire  conse¬ 
quences  for  Compaq’s  Tru64  Unix, 
OpenVMS  and  several  HP  storage 
platforms.  True  or  false?  You  have 
those  answers.  Don’t  dodge  the 
questions. 

Gartner  is  also  telling  your  cus¬ 
tomers  to  demand  “steep,  multiyear 
discounts”  as  HP/Compaq  tries  to 
“win  business  at  all  costs.”  So  pre¬ 
pare  to  bargain.  Your  rivals  at  IBM, 
Sun  and  Dell  have  certainly  wasted 
no  time  leveraging  the  growing  un¬ 
certainty  among  your  customers. 
Case  in  point:  the  recent  loss  of  a 
flagship  HP  account  at  Nestle  to  IBM 
in  a  $500  million  data  center  consoli¬ 
dation  deal  [“Nestle  Shifts  From  HP 
to  IBM  in  Data  Center  Pact,”  News, 
March  11].  How  many  more  such 
losses  can  you  afford? 

Finally,  pay  some  serious  attention 
to  the  people  factor.  Don’t  say  15,000 
job  cuts  if  it’s  really  going  to  be  twice 
that  number.  Don’t  tell  customers 
their  familiar  sales  and  support  peo¬ 
ple  will  remain  when  you  know  how 
much  turmoil  lies  ahead.  IT  man¬ 
agers  want  you  both  to  succeed,  to 
regain  the  market  leadership  you’ve 
lost.  Don’t  keep  them  waiting  much 
longer  for  the  real  answers.  I 


PIMM  FOX 

IT  Talent 
Still  Thriving 
In  Big  Cities 

Anew  report  about 
IT  skills  reveals  two 
trends:  In  the  U.S.,  if 
you’re  hunting  for  IT  talent, 
shop  in  the  big  metropolitan 
regions.  Overseas,  if  you’re  in  the  mar¬ 
ket  for  IT  professionals,  Romania  and 
China  are  hot 
spots  to  watch. 

The  study, 
conducted  in 
2001  by  Chan¬ 
tilly,  Va.-based 
Brainbench, 
amply  belies  re¬ 
ports  that  major 
U.S.  metro  re¬ 
gions  are  less  at¬ 
tractive,  at  least 
for  IT  skills. 

Last  year’s  ter¬ 
ror  attacks  provoked  a  wave  of  hand- 
wringing  over  the  urban  location  of 
data  centers  and  backup  facilities,  and 
of  course  redundant  and  secure  facili¬ 
ties  are  a  must  for  any  IT  operation. 

But  the  pool  of  talent  could  off-set 
plans  to  move  IT  operations  to  more 
remote  locations. 

The  report,  polling  750,000  of  Brain- 
bench’s  online  test-takers,  takes  into 
account  a  variety  of  IT  certification  ar¬ 
eas  such  as  Active  Server  Pages,  C,  C++, 
computer  technical  support,  HTML  3.2, 
HTML  4.0,  Java  1,  Java  2,  JavaScript  and 
network  technical  support. 

The  results  showed  that  dot-bomb 
central  —  San  Francisco  —  led  the 
nation  in  the  number  of  certified  IT 
professionals.  New  York,  which  wit¬ 
nessed  companies  exiting  downtown 
offices  after  the  World  Trade  Center 
attack,  came  in  second,  followed  by 
Washington,  Chicago,  Dallas,  Los 
Angeles,  Atlanta,  Detroit,  Seattle  and 
Denver  in  the  top  10. 

Regions  that  have  positioned  them¬ 
selves  as  the  next  Silicon  Valley  fell  off 
the  list,  at  least  temporarily.  Raleigh/ 
Durham,  N.C.;  Minneapolis/St.  Paul; 
Milwaukee/Racine;  Greensboro/Win- 
ston-Salem/Highpoint,  N.C.;  St.  Louis; 
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Austin,  Texas;  Dayton/Springfield, 
Ohio;  and  Las  Vegas  were  all  displaced 
from  the  top  10. 

Brainbench  President  and  CEO  Mike 
Russiello  said  one  reason  for  the  shift 
may  be  the  report’s  methodology.  “Last 
year,  we  ranked  IT  certifications  based 
on  the  quality  of  the  score,”  he  said. 
“The  present  survey  looks  at  the  total 
number  of  people  who  scored  above  a 
minimum  level.” 

Even  with  the  new  criteria,  the  U.S. 
has  the  most  certified  IT  professionals, 
with  nearly  200,000,  followed  by  India 
and  the  Russian  Federation.  The  sur¬ 
prise  is  Romania,  at  No.  6.  “IT  is  seen 
as  adding  value  to  the  economy.  And 
with  increased  offshore  IT  work,  Ro¬ 
mania  is  trying  to  carve  out  a  niche  as 
a  low-cost  IT  center,”  said  Russiello. 

In  China,  which  ranks  No.  38  on  the 
list,  engineering  graduates  account  for 
37%  of  all  university  students,  com¬ 
pared  with  just  6%  in  the  U.S.  So  even 
though  IT  skills  are  supposed  to  foster 
higher-paying  jobs,  the  supply  of  IT 
workers  keeps  a  lid  on  wages. 

The  bottom  line  for  now  is  that 
cities  aren’t  dead  and  inexpensive  IT 
talent  is  growing.  I 

MICHAEL  GARTENBERG 

Enough  Is 
Enough  With 
Microsoft  Case 

T’S  TIME  TO  CLOSE  THE 
book  on  the  Microsoft 
antitrust  case  once  and  for 
all.  Even  after  the  settlement 
with  the  federal  government, 

nine  of  the  18  states  that  had  joined  the 
Justice  Department  suit  continue  to 
push  the  case.  This  is  despite  the  fact 
that  the  appellate  courts  threw  out  the 
most  egregious  of  charges  against  Mi¬ 
crosoft  and  the  Justice  Department  ac¬ 
knowledged  that  it  settled  the  case  be¬ 
cause  it  felt  that  it  would  lose  in  court. 

At  the  heart  of  the  litigation  by  the 
states  are  the  proposed  sanctions.  The 
states  are  asking  that  Microsoft  be 
forced  to  offer  different  versions  of 
Windows  or  create  a  “modular”  version 
that  could  be  stripped  of  a  browser,  me¬ 
dia  player  or  instant  messaging  client. 
All  this,  of  course,  is  for  the  benefit  of 
consumers.  The  only  problem  with  this 
argument:  The  sole  beneficiary  of  such 
sanctions  against  Microsoft  would  be 
Microsoft’s  competition.  (Some  of  the 
nine  holdouts  are  home  to  some  of  Mi¬ 


crosoft’s  biggest  competitors.) 

The  truth  is  that  enter¬ 
prise,  small  business  and 
consumer  customers  have 
all  clearly  benefited  from 
the  integrated  features  in 
Windows,  as  well  as  in  other 
operating  systems.  Many  of 
us  recall  the  days  when 
there  was  a  thriving  indus¬ 
try  for  TCP/IP,  the  core 
software  that  allows  all  PCs 
to  connect  to  the  Internet. 

One  day,  an  operating  sys¬ 
tem  provider  thought  it 
would  be  more  beneficial  to 
customers  if  TCP/IP  were 
included  as  part  of  the  operating  sys¬ 
tem,  rather  than  sold  as  an  add-on.  To 
the  chagrin  of  third-party  vendors,  it 
did  just  that  and  offered  the  first  inte¬ 
grated  TCP/IP  stack  and  made  it  far 
easier  for  users  to  maintain,  support 
and  configure.  The  rub  in  the  story  is 
that  the  company  wasn’t  Microsoft,  but 


Apple  Computer.  In  order 
to  help  consumers,  should 
the  government  not  force 
Microsoft,  Apple  and  oth¬ 
ers  to  strip  TCP/IP  soft¬ 
ware  from  their  operating 
systems?  After  all,  TCP/IP 
was  once  sold  separately 
from  operating  systems. 

Perhaps  PC  vendors 
shouldn’t  be  immune  ei¬ 
ther.  I  recall  the  days  when 
a  PC  purchase  meant  the 
addition  of  a  separate  video 
card,  sound  card,  optical 
drive,  network  interface 
card  and  modem.  Today, 
these  are  all  “integrated”  features. 
They’re  matched,  work  without  con¬ 
flict  and  offer  value  to  customers.  Yet 
customers  are  free  to  upgrade  and  re¬ 
place  what  they  see  fit,  and  despite  the 
“bundling”  of  hardware  features,  the  PC 
peripherals  market  thrives. 

Critics  of  the  Microsoft  agreement 


cite  the  diminished  market  share  of 
Netscape  Navigator  vs.  Internet  Explorer 
as  proof  of  Microsoft’s  wrongdoing.  Hav¬ 
ing  been  an  analyst  in  that  space  at  the 
time,  my  view  is  that  arrogance  and  in¬ 
competence  led  to  Netscape’s  share  loss. 

The  fact  remains  that  despite  fears, 
Microsoft  doesn’t  own  the  media  play¬ 
er  space  (RealNetworks’  RealPlayer  is 
doing  nicely),  nor  handhelds  (where 
Palm  still  holds  the  lion’s  share,  with 
70%  of  all  handhelds  running  some 
form  of  Palm  OS),  nor  has  it  gained  the 
blessings  of  any  of  the  leading  cell 
phone  vendors  to  adopt  its  smart  phone 
platform.  As  for  the  emerging  world  of 
network-based  services  that  will  ulti¬ 
mately  fuel  the  next  generation  of 
ubiquitous  computing,  no  one  owns  it. 

There’s  no  doubt  that  some  of  Mi¬ 
crosoft’s  business  practices  needed  to 
be  modified,  and  the  DOJ  and  the  com¬ 
pany  wisely  agreed  to  terms  to  do  just 
that.  It’s  now  time  for  the  rest  of  the 
states  to  join  in.  I 


READERS’ LETTERS 


No  Sympathy  for  UCITA 

Alex  torralbas’  col¬ 
umn  “Lost  in  the 
UCITA  Fight”  strikes 
me  as  a  self-serving  whine 
[News  Opinion,  March  11]. 
He  fails  miserably  in  his  at¬ 
tempt  to  portray  this  flawed 
legislation  as  the  sole  hope 
for  small  software  vendors 
to  counter  reverse-engi¬ 
neering,  unauthorized  copy¬ 
ing  and  general  legalistic 
strong-arm  tactics  by  large 
customers. 

Sadly,  UCITA  won’t  solve 
the  small  software  vendor’s 
problems  negotiating  with 
large  customers,  because  a 
customer  will  simply  reject 
any  overly  restrictive  con¬ 
tract.  In  November  2001, 
Computerworld  reported 
that  McDonald’s  rejected  a 
contract  that  invoked  Mary¬ 
land’s  UCITA  law. 

Worse,  UCITA  holds  a 
customer’s  data  hostage. 
Reverse-engineering  is  re¬ 
quired  for  interoperability, 
but  unless  a  software  vendor 
graciously  provides  proper 
export  mechanisms,  cus¬ 
tomers  could  be  stuck  print¬ 
ing  and  rekeying  all  data. 
This  lock-in  isn’t  lost  on  the 
vendor,  which  would  have 


even  less  incentive  to  make 
a  good  product. 

Steve  Lift 

Longwood,  Fla. 

Although  i  wasn’t  in 
the  mood  for  Alex 
Torralbas’  sopho- 
moric  humor,  I  take  his 
points  that  smaller  software 
companies  are  at  a  signifi¬ 
cant  negotiating  disadvan¬ 
tage  over  large,  brand-name 
software  companies  when  it 
comes  to  license  agreements 
and  that  UCITA  was  intend¬ 
ed  to  level  the  playing  field. 
What  I  take  issue  with  is 
that  most  software  is  sold  as 
a  product,  when  what  I  want 
is  a  service.  License  agree¬ 
ments  typically  reflect  this 
“product”  mentality  of  the 
developer,  so  right  away  the 
customer  and  vendor  get  off 
on  the  wrong  foot. 

Software  vendors’  prod¬ 
uct-centric  attitude  is  why, 
when  it  came  to  building  a 
Web-based  e-commerce  ex¬ 
change  for  our  clients,  we 
failed  at  finding  a  vendor 
that  was  willing  to  provide 
the  service  we  needed,  based 
on  the  products  for  sale.  We 
therefore  spent  some  $5  mil¬ 
lion  going  to  a  “work-for- 
hire”  software  shop,  and  to¬ 


day  we  ourselves  provide  the 
services  our  clients  require, 
using  software  that  we  own 
outright. 

When  vendors  are  more 
concerned  about  how  their 
customers  use  their  software 
to  provide  services  to  oth¬ 
ers,  we  won’t  need  UCITA; 
licensing  agreements  will  be 
but  one  small  section  in  a 
services  contract  between 
the  customer  and  the  ser¬ 
vice  provider.  Gee,  sounds 
like  IBM,  doesn’t  it?  Or  is 
that  too  sophomoric  a  note 
on  which  to  end? 

L.  Mark  Stone 
Senior  vice  president  and  CIO 
Argent  Trading  LLC 
New  York 

Mixed  Messages 

I  found  it  ironic  that  a 
Page  One  story  on  March 
4  bemoans  the  dearth  of 
experienced  mainframe  IT 
workers  [“Mainframe  Skills, 
Pay  at  a  Premium”]  while  the 
Career  Adviser  column  in 
the  same  issue  counsels  a 
seasoned  mainframer  that 
the  market  will  continue  to 
wane.  Moreover,  the  main¬ 
framer  is  advised  to  “upgrade 
your  skills,  your  understand¬ 
ing  of  business  and  possibly 


even  your  appearance.”  This 
generic  and  contextually 
condescending  advice  seems 
appropriate  for  all  employed 
individuals,  in  IT  or  not. 
Perhaps  the  Career  Adviser 
should  note  (again,  from 
Page  One)  that  mainframe 
shipments  are  on  the  rise; 
that  in  one  Canadian  organi¬ 
zation,  mainframe  experts 
command  a  hot  skills  premi¬ 
um;  and  that  in  California,  a 
company  is  using  part  of  its 
training  budget  to  bring 
younger  workers  up  to  speed 
on  mainframe  technologies. 
Hunter  Cobb 
Trainer 

Hunter's  Training  Associates  LLC 
Denver 
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It's  the  automated  array  and  all  of  its  cost-saving  features. 
HP's  Virtual  Arrays  save  you  money  by  automating  the 
manual  processes  required  in  traditional  arrays.  Tuning  out 
hot  spots,  adding  storage  space  and  protecting  your  data — 
automatically.  Freeing  your  valuable  IT  resources  and 
taking  the  mystery  out  of  efficient  data  management. 

[  Hurry,  and  request  your  free  copy  of  the 

HP  Virtual  Array:  Double  Your  Operating  Efficiency  guide 
now,  visit  www.hp.com/info/virtualarray  ] 
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JOE  AUER/DRIVING  THE  DEAL 

The  Right  Attitude 


ONE  OF  THE  MORE  IMPORTANT  ISSUES  when  I  advise  IT 
buyers  is  their  basic  attitude  toward  contract  negotiations. 

In  many  situations,  the  end  user  or  senior  management  has 
a  friendly,  close  relationship  with  representatives  of  the  ven¬ 
dor.  The  vendor  is  referred  to  as  their  partner,  friend  or  the 
one  with  the  solution  to  their  problem.  As  a  result,  these  stakeholders, 
who  must  protect  their  company’s  interests,  can  be  less  than  objective  in 
analyzing  the  vendor’s  proposals,  promises  and  provisions. 


Whenever  I  brief  the  key  players  on  the  customer’s 
negotiating  team,  I  use  the  following  “attitude  adjust¬ 
ment”  points,  which  are  useful  for  all  of  us: 

■  Negotiations  begin  when  the  first  person  in  your 
organization  exchanges  information  with  the  vendor. 
You  gain  or  lose  negotiating  power  with  every  suc¬ 
ceeding  interaction. 

■  The  customer  is  the  buyer,  and  the  vendor  is  only 
the  potential  supplier.  You’ve  got  what  all  the  vendors 
want  —  the  money. 

■  Change  your  “needs”  to  “preferences.”  Needs 
aren’t  negotiable;  preferences  are.  Don’t  tell  a  vendor 
you  need  it,  its  product  or  its  service.  Just  say  you 
prefer  it. 

■  At  negotiation  time,  the  vendor’s  sales  represen¬ 
tative  has  projected  to  his  management  that  the  deal 
with  the  customer  has  already  been  sold.  Use  this  to 
your  advantage,  since  the  sales  rep  has  placed  the 
pressure  on  himself  to  close  the  deal. 

■  Vendor  reps  face  many  pressures  to 
reach  certain  sales  goals  at  various  times, 
such  as  quarterly,  annually  or  when  earn¬ 
ings  are  down.  Be  aware  of  these  pressures. 

■  Vendors  will  try  to  exploit  almost  any 
sense  of  urgency.  Remember  that  haste 
makes  waste,  unless  your  side  is  the  better 
prepared,  has  alternatives  and  sets  a  dead¬ 
line  that’s  to  your  advantage. 

■  Generally,  it’s  to  the  customer’s  advan¬ 
tage  when  vendors  bring  in  their  top  brass, 
as  long  as  the  customer  is  unimpressed 
with  warm-and-fuzzy  talk  about  relation¬ 
ships  and  places  on  the  agenda  substantive 
negotiation  points  to  address  with  the  ven¬ 
dor’s  executives.  They  have  more  to  give 
away  than  the  sales  reps  do. 

■  Never  rely  on  vendor  promises  and 
benefits  unless  they’re  written  in  the  con¬ 
tract,  and  hold  the  customer  personnel 
who  trust  those  promises  accountable. 


■  Vendor  shareholders  and  senior  management  are 
primarily  interested  in  bottom-line  profits  and  allo¬ 
cating  risks  to  the  customer,  not  interpersonal  rela¬ 
tionships.  Don’t  rely  on  these  relationships;  vendors 
just  use  them  to  get  what  they  really  want. 

■  Multiple  acquisition  methods  (leasing  vs.  pur¬ 
chasing,  short-  vs.  long-term  contracts)  should  be 
considered  in  most  cases,  though  vendors  will  try 
to  give  you  tunnel  vision  that  benefits  their  current 
performance  objectives. 

■  The  customer  does  have  alternative  vendors, 
approaches  and  deal  timing,  and  both  sides  should 
be  aware  of  that  during  negotiations. 

■  Vendors  must  be  aware  that  negotiations  will  end 
only  when  the  customer  is  fully  satisfied  and  the 
agreement  is  fully  documented. 

■  Ignore  a  vendor’s  claims,  especially  early  in  nego¬ 
tiations,  of  “That’s  the  best  deal  we  can  give  you.” 

■  If  you  haven’t  heard  a  no  from  the  vendor  or 
haven’t  experienced  a  deadlock,  impasse  or  some  sort 

of  breakdown  in  negotiations  because  you 
asked  for  too  much,  you  haven’t  gotten  the 
best  deal  you  can  get. 

■  Remember  that  negotiations  are  en¬ 
hanced  by  thorough  planning,  knowledge, 
teamwork  and  dedication  to  securing  the 
best  contract  protections  at  the  best  price. 

■  Most  important,  remember  that  com¬ 
petition  is  your  strongest  ally.  Don’t  select 
a  vendor  until  you’ve  gone  through  com¬ 
petitive  negotiations  on  everything, 
including  the  contract,  with  at  least  two 
potential  vendors. 

You  and  the  rest  of  your  negotiating 
team  should  keep  these  points  in  mind 
and  review  them  like  you  would  review  a 
checklist  before  each  negotiation.  After  all, 
other  professionals,  like  pilots  who  have 
been  flying  for  20  years,  still  review  their 
checklists  before  takeoff.  > 


joe  auer  is  president  of 
International  Computer 
Negotiations  Inc.  (www.  \ 
dobetterdeals.com ),  a 
Winter  Park.  Fla.,  consul-  \ 
tancy  that  educates  j 
users  on  high-tech  pro¬ 
curement.  ICN  sponsors 
CAUCUS:  The  Associa¬ 
tion  of  High  Tech  Acqui¬ 
sition  Professionals. 

Contact  him  at 
joea@dobetterdeals.com . 
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T  professionals  face  a  major  headache 
when  it  comes  to  procuring  and  imple¬ 
menting  software:  Should  they  go  with  the 
big-footprint  vendors  or  the  best-of-breed 
niche  players?  It  really  depends  on  each 
company’s  individual  needs. 

For  some  businesses,  the  question  boils  down  to 
whether  world-class  functionality  is  really  required. 

“Companies  that  need  to  have  a  single  view  of  cus¬ 
tomers  across  business  units  and  products,  and  the 
ability  to  understand  customers’  needs,  and  to  react 
to  them  in  real-time  might  require  a  more  special¬ 
ized  CRM  implementation,  like  Siebel,”  says  Steve 
Berez,  vice  president  of  IT  and  e-business  at  Bain  & 
Co.,  a  Boston-based  management  consultancy. 

But  if  those  requirements  aren’t  key  drivers,  says 
Berez,  “then  they  may  be  perfectly  fine  with  Oracle, 
even  though  that  solution  is  less  robust.” 

Vendors,  it  seems,  tend  to 
claim  ever-greater  expertise  in 
their  market’s  products,  exacer¬ 
bating  the  IT  manager’s  age-old 
dilemma  of  whether  to  procure 
best-of-breed  or  integrated  technologies.  As  all-in- 
one  software  providers,  like  SAP  AG,  broaden  the 
scope  of  their  offerings,  they  run  into  best-of-breed 
competitors,  and  the  race  to  win  customers  is  on. 

While  best-of-breed  software  vendors  concentrate 
on  providing  the  latest  specialty  products,  enterprise 
providers  claim  convenient,  modular  integration 
capabilities,  fewer  errors  in  data  translation  and  low¬ 
er  licensing,  implementation  and  maintenance  costs. 

Best-of-breed  vendors  fight  to  retain  their  appli¬ 
cation  leadership  positions  by  developing  vertical 
domain  expertise  and  functionality.  Though  some 
customers  will  continue  to  require  highly  specialized 
applications,  the  gap-narrowing  efforts  by  the  inte¬ 
grated  suppliers  tend  to  satisfy  the  needs  of  most 
users,  customers  and  analysts  say. 


Closing  the  Gap 

Brian  Zrimsek,  an  analyst  at  Stamford,  Conn.- 
based  Gartner  Inc.,  terms  the  interplay  between  best- 
of-breed  and  integrated  suppliers  “the  cycle  of  as¬ 
similation,”  because  he  anticipates  that  broad  soft¬ 
ware  vendors  are  likely  to  catch  up  with  the  special¬ 
ists  since  functionality  has  become  a  commodity  and 
the  business  requirements  are  in  the  public  domain. 

“I  come  down  on  the  side  of  integrated  solutions 
as  opposed  to  best-of-breed,  as  long  as  there  is  func¬ 
tional  parity,”  he  says.  “There  are  fewer  vendors  to 
deal  with  and  only  one  support  desk.” 

For  instance,  in  the  customer  relationship  manage¬ 
ment  (CRM)  space,  Zrimsek  says,  he  believes  that 
some  of  the  broader  software  vendors,  such  as  SAP, 
PeopleSoft  Inc.  and  Oracle  Corp.,  are  achieving  pari¬ 
ty  in  sales  force  automation. 

“In  supply  chain,  ERP  vendors  are  behind  best-of- 
rreed  vendors  in  areas  like  transportation  manage¬ 
ment  and  warehouse  management  but  are  getting 
io  .  in  demand  planning  and  constraint-based 
nning,”  he  notes. 

Two  years  ago,  “enterprise  vendors  weren’t  mov- 
;•  dong  with  supply  chain  applications  or  CRM,” 

'  \  s  Pete  Janak,  CIO  at  Delphi  Automotive  Systems 
in  Troy,  Mich.  “So  you’d  see  companies  deploy- 

Continued  on  page  30 


As  enterprise  software  vendors  push  greater 
functiona  ity,  integration  capabilities  and  lower 
support  costs,  the  line  between  best-of-breed 
and  all-in-one  systems  begins  to  blur. 

By  Peter  Buxbaum 


IN  TIMES  LIKE  THESE.  YOU  WEED 
E-BUSINESS  SOLUTIONS  THAT  WILL  HELP 

YOU  SURVIVE  TIMES  LIKE  THESE, 


Today,  the  best-run  e-businesses  know  that  to  achieve  real  R( )I,  you  need  more  than  ad  hoc 
approaches  and  stand-alone  solutions.  You  need  a  new  way  to  make  everything  work  together. 
SAP  is  a  leading  provider  of  integrated  e-business  solutions.  Our  expertise  in  21  industry-solution 
areas  has  helped  86%  of  the  top  50  Global  Fortune  companies  focus  on  the  things  that  matter 
most:  efficiency  and  profitability.  To  see  how  we  can  help  you,  v  isit  sap.com 


THE  BEST-RUN  E-BUSINESSES  RUN  SAP 
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If  [single-source]  flat- 
out  doesn’t  provide  the 
functionality  that  is  needed 
in  a  particular  area,  you 
need  to  go  best-of-breed. 

PETE  JANAK,  CIO,  DELPHI  AUTOMOTIVE  SYSTEMS 

Continued  from  page  28 

ing  SAP  as  an  application  platform  with  i2  [Tech¬ 
nologies  Inc.  software]  on  top  of  it  for  supply  chain 
management  and  Siebel  for  CRM.  But  then  SAP 
came  along  with  good  supply  chain  and  CRM  solu¬ 
tions,  so  SAP  customers  began  moving  to  SAP  for 
those  applications  as  well.” 

Customers  that  choose  single-source  systems 
should  demand  and  receive  better  pricing  than  their 
best-of-breed  counterparts,  says  Bruce  Blitch,  CIO  at 
Tessenderlo  Kerley  Inc.  (TKI),  a  Phoenix-based 
chemical  company.  TKI  demonstrates  that  you  don’t 
have  to  be  a  huge  company  to  exercise  that  leverage. 

TKI  is  a  wholly  owned  subsidiary  of  Tessenderlo 
Group,  a  Belgian  corporation  with  total  revenue 
last  year  of  $1.59  billion.  The  revenue  generated  by 
production  in  the  U.S.  —  almost  all  of  which  can  be 
attributed  to  TKI  —  accounts  for  just  11%  of  that 
total,  or  approximately  $175  million. 

Even  though  it’s  not  a  big  player,  TKI  received 
the  royal  treatment  from  Cisco  Systems  Inc.  when  it 
decided  to  single-source  its  WAN/LAN  from  that 
vendor. 

“Cisco  responded  with  national  account  service 
and  pricing,”  says  Blitch.  “They  directly  attributed 
their  unusual  response  to  our  desire  to  make  the 
total  commitment  to  their  product  line.” 

And  TKI  didn’t  land  those  favors  like  other  com¬ 
panies  that  have  taken  advantage  of  the  40%  to  50% 
discounts  many  vendors  have  been  offering  during 
the  current  economic  slump.  The  company  went  live 
on  SAP  across  the  Cisco  WAN  in  early  1999,  long 
before  the  economy  took  a  dive. 

Despite  all  of  these  advantages,  even  single-source 
aficionados  go  with  best-of-breed  applications  occa¬ 
sionally.  “If  it  flat-out  doesn’t  provide  the  functionali¬ 
ty  that  is  needed  in  a  particular  area,  you  need  to  go 
best-of-breed,”  says  Janak. 

And  companies  continue  to  need  top-of-the-line 
functionality  for  operations  that  provide  a  competi¬ 
tive  or  strategic  edge,  according  to  Berez. 

“For  many  firms,  having  the  best  warehouse 
management  functionality  is  not  a  strategic  require- 
rr.ent,”  he  says.  ‘  For  logistics  providers,  it  is  core  to 
their  business,  and  if  they  cannot  provide  a  full  range 
T  options,  it  will  put  them  at  a  competitive  disad¬ 
vantage.”  * 


aum  is  a  freelance  writer  in  Elizabeth,  N.J. 
Contact  him  at  pab001@aol.com 


ALL-IN-ONE 

Bevcore  Takes  a  Big  Gulp 


“Having  been  through  Ihe  best-of-breed 
approach,  we  saw  that  it  can  be  very  costly 
and  take  a  long  time,”  says  David  Womeldorf, 
vice  president  for  technical  operations  at  IMI 
Bevcore  Solutions  Inc.,  an  Osseo,  Minn.- 
based  supplier  of  spare  parts  for  beverage 
machines. 

The  challenges  he  faced  in  that  project 
taught  Womeldorf  to  whistle  a  different  tune. 
The  company  now  relies  on  PeopleSoft  for 
almost  all  of  its  enterprise  systems  as  well  as 
the  hosting  and  consulting  activities  associat¬ 
ed  with  them. 

“The  two  biggest  hurdles  to  the  best-of- 
breed  approach  are 
single-user  sign-on  for 
managing  state  and  ses¬ 
sion  and  the  integration 
at  a  systems-interface 
level,”  says  Womeldorf. 

“It  is  also  difficult  to  con¬ 
trol  the  scope  of  best-of- 
breed  projects,  because 
you  are  dependent  on 
multiple  consulting  firms 
with  expertise  in  specific 
technologies.” 

From  a  cost-effective 


standpoint,  Womeldorf  says,  he  believes  that 
single-sourcing  also  has  a  slight  edge  be¬ 
cause  it  enables  the  vendor  to  bundle  mod¬ 
ules  together.  “But  the  real  cost  savings  are  in 
the  reduced  skills  set  required  to  support  the 
applications  and  to  develop  the  required  cus- 
tomizations,"  he  says. 

Womeldorf  acknowledges  that  there’s  an 
initial  trade-off  between  implementing  enter¬ 
prise  software  and  meeting  the  business 
needs  of  the  company.  But,  he  warns,  “quick 
and  dirty  customizations  to  speed  implemen¬ 
tation  can  come  back  to  bite  you  later.” 

Instead,  Bevcore  customized  its  People- 
Soft  supply  chain,  CRM, 
financial  and  human 
resources  applications 
after  the  installation. 

“We  did  it  from  the 
user  perspective,” 
Womeldorf  says.  “It’s 
best  to  get  it  up  and 
running  before  making 
up  your  mind  about  how 
to  customize.  There  is  a 
tremendous  advantage 
to  that  approach." 

-  Peter  Buxbaum 


IMI  Bevcore 

Solutions  Inc. 
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Supplies  spare  parts 
for  beverage  machines 

IMI  Bevcore 
tried  a  best-of-breed  approach  and 
ran  into  problems  with  single-user 
sign-on  and  integration  with  other 
systems.  Plus,  the  company  discov¬ 
ered  that  an  all-in-one  approach 
was  more  cost  effective  from  tech 
support  and  skills  set  standpoints. 


BEST-OF-BREED 

Ryder  Takes  the  Specialty  Route 


As  a  third-party  logistics  provider,  Miami-based 
Ryder  Systems  Inc.  offers  a  varied  menu  of 
services  to  its  customers,  from  planning  to 
trucking  to  warehousing,  and  all  of  them  are 
powered  by  IT. 

Given  the  nature  of  the  company’s  busi¬ 
ness,  there's  no  substitute  for  a  best-of-breed 
approach,  according  to  Kevin  Bott,  Ryder’s 
vice  president  for  product  and  technology 
management. 

"We  don’t  have  a  vendor  that  can  meet  all 
of  our  needs,"  says  Bott.  “There  is  no  A-to-Z 
solution.  Each  provider  has  a  sweet  spot  that 
they  work  in." 

Ryder  uses  i2  Tech¬ 
nologies  for  transporta¬ 
tion  management,  Qual¬ 
comm  Corp.  for  mobile 
communications,  Xeta 
Technologies  for  on¬ 
board  computing  and 
Manhattan  Associates 
Inc.  and  EXE  Technolo¬ 
gies  Inc.  for  warehouse 
management.  The  com¬ 
pany  recently  signed  a 
deal  with  SeeBeyond 


Technology  Corp.  for  enterprise  application 
integration. 

“We  conduct  due  diligence  to  make  sure 
the  vendor’s  strategy  lines  up  with  ours  long 
term,"  says  Bott.  “We  make  sure  we  are  deal¬ 
ing  with  significant  players  in  order  to  keep  as 
up-to-date  as  possible." 

While  companies  that  go  the  single-source 
route  tout  the  volume  leverage  they  can  assert 
over  their  vendors,  $5.5  billion  Ryder  is  capa¬ 
ble  of  influencing  its  own  myriad  vendors.  “We 
maintain  strong  relationships  to  get  what  we 
need,"  says  Bott.  “If  we  need  a  major  enhance¬ 
ment  for  one  of  our  customers,  we  get  the 
developer  to  reprioritize 
its  development  plans.” 

At  the  same  time, 

Ryder  relies  solely  on  IBM 
to  host  its  data  center  and 
manage  its  infrastructure 
and  leans  on  Accenture 
as  its  prime  source  for  IT 
labor.  Even  with  that, 
however,  Ryder  will  look 
outside  the  relationship 
when  it’s  warranted. 

-  Peter  Buxbaum 


Ryder  Systems  Inc. 

Trucking,  warehous¬ 
ing  and  customer  service 

RWer 

Systems  provides  a  wide  variety  of 
services  to  its  customers,  from 
trucking  to  warehousing,  so  it 
doesn't  have  a  single  vendor  that 
can  meet  all  of  its  needs  -  or  those 
of  its  customers. 
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Mind-Boggling  Performance 


Meet  the  Passport 
8600  Routing  Switch. 

Let’s  talk  performance  -  with  scalability  up  to  128  Gbps  of  switching 
capacity  and  penalty-free  QoS,  all  wrapped  up  in  a  fault-tolerant 
chassis,  we're  talking  some  serious  hardware.  Couple  that  with  a 
variety  of  10/100,  Gigabit  Ethernet,  Packet  over  SONET  and  ATM 

ports  and  you  begin  to  see  why  Nortel  Networks™ 
we’re  so  passionate  when  we  talk  is  a  Global  Leader  in  L2-7 
about  delivering  world-class  high  Ethernet  Switching 
performance  LAN/MAN/WAN  connectivity  for  Enterprise  networks. 
From  the  physical  to  the  logical,  we’ve  designed  all  aspects  of  this 
product  to  be  easy  to  install,  operate  and  maintain.  It's  designed  to 
provide  protection  strategies  at  multiple  levels  to  deliver  99.999% 
reliability.  And  talk  about  flexible  -  the  Passport™  8600  is  available 
in  a  3-slot  chassis  for  small  Enterprise  networks;  a  6-slot  chassis 
designed  for  backbones  in  which  space  is  at  a  premium  and  lower 
density  is  desired;  and  a  10-slot  chassis  designed  for  backbones 
that  need  the  highest  levels  of  availability  and  scalability. 
The  possibilities  are  mind-boggling.  To  learn  more  about  the 
Ethernet  switching  capabilities  Passport  8600  enables,  visit 
nortelnetworks.com/passport8600. 


Nortel  Networks,  the  Nortel  Networks  logo,  the  Globemark  and  Passport  are  all  trademarks  of  Nortel  Networks. 
©2002  Nortel  Networks.  All  rights  reserved.  ‘Dell'Oro  report,  4Q’01. 
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txpect  two 
years  of 
headaches, 
but  the 
rewards  can 
be  worth  it. 
By  Matt 
Hamblen 

Thanks  to  the  recession 
and  the  resulting  push  to 
contain  costs,  ROI  has  be¬ 
come  a  big  buzzword  in  IT. 
Yet  few  companies  are  track¬ 
ing  ROI  in  a  consistent  and  standard 
manner,  says  Kazim  Isfahani,  an  ana¬ 
lyst  at  The  Robert  Frances  Group  in 
Westport,  Conn. 

Two  companies  that  have  embraced 
standard  ROI  measurements  —  Merrill 
Lynch  &  Co.  and  Compaq  Computer 
Corp.  —  began  implementing  their 
own  standard  IT  planning  processes 
more  than  two  years  ago.  In  both  cases, 
managers  had  a  hard  time  setting  up 
the  methodology,  because  the  IT 
process  was  time-consuming  and  high¬ 
ly  political.  But  the  result  for  both  or¬ 
ganizations  has  already  been  worth¬ 
while  in  terms  of  Financial  payoffs  and 
in  raising  the  strategic  value  of  IT  with¬ 
in  the  companies,  managers  report. 

About  23%  of  U.S.  companies  re¬ 
quire  a  detailed  ROI  analysis  to  justify 
investments  in  all  IT  projects,  accord¬ 
ing  to  a  December  2001  survey  of  1,200 
businesses  conducted  by  Marcoccio 
Consulting  in  Westboro,  Mass.  That’s 
up  from  just  9%  in  March  2001,  an  in¬ 
crease  that  leads  consultant  Lou  Mar¬ 
coccio  to  predict  that  by  the  end  of 
this  year,  65%  of  companies  will  re¬ 
quire  a  detailed  ROI  analysis  to  justify 
IT  projects  because  of  pressure  from 
top  management,  executive  boards 
and  shareholders. 

"ROI  is  going  to  be  much  bigger  going 
For  ward. ...  It  has  to  be  much  more 
than  a  fire  drill  to  make  a  difference,” 
s.-O'  s  Marcoccio,  author  of  a  book  on 
sf  practices  for  ROI  measures  that 
.  :.!>  be  released  this  summer. 

Most  organizations  don’t  have  ex- 
.  i  m  the  whole  concept  of  ROI, 

:(  \  v  ause  in  the  past,  IT  leaders 
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haven’t  been  the  best  business  lead¬ 
ers,”  he  adds. 

Compaq  and  New  York-based  Mer¬ 
rill  Lynch  both  have  ROI  evaluations 
at  the  core  of  their  IT  project  planning 
processes,  having  overcome  many  bu¬ 
reaucratic  and  philosophical  obstacles 
to  get  there,  including  getting  business 
and  IT  employees  to  meet  and  talk 
with  one  another  regularly. 

“This  process  has  clearly  lowered 
our  technology  spending  on  what  I’d 
call  nonstrategic  investments  and  re¬ 
directed  spending  to  more  strategic 
areas,”  says  Marvin  Balliet,  chief  finan¬ 
cial  officer  for  the  technology  group  at 
Merrill  Lynch.  The  financial  services 
company  now  has  business  people 
who  will  use  the  technology  involved 
in  budgeting  and  planning  for  IT. 

At  Compaq,  “IT  is  targeted  more 
to  where  the  company  needs  it,”  says 
John  Buda,  vice  president  of  strategy, 
planning  and  program  management. 

As  a  result,  “IT  dollars  are  much  better 
spent,”  he  explains. 

At  both  companies,  ROI  measure¬ 
ment  is  only  part  of  a  much  bigger 
planning,  communication  and  prioriti¬ 
zation  process.  One  key  difference  be¬ 
tween  the  two  companies’  approaches 
to  measuring  ROI  is  that  Merrill  Lynch 
requires  a  15%  cash  return  on  equity 
investment  within  five  years  for  a  proj¬ 
ect.  At  Compaq,  a  project’s  ROI  status 
must  be  examined  after  a  year,  but  no 
set  payback  level  is  required. 

Even  a  generous  positive  return 
doesn’t  guarantee  that  a  project  will  go 
forward  at  Compaq.  That’s  especially 
true  if  it  involves  a  piece  of  hardware  or 
software  that  veers  away  from  the 
company’s  technology  blueprint  and 
infrastructure. 

For  example,  the  use  of  business-to- 
business  tools  for  e-commerce  by  Com¬ 
paq  workers  in  Asia  should  conform 
to  the  business-to-business  tools  plat¬ 
form  the  company  uses  elsewhere  in 
the  world,  officials  say. 

“Setting  an  ROI  return  level  at  a  cer¬ 
tain  amount  might  mean  people  don’t 
bring  good  ideas  forward,”  says  Com¬ 
paq’s  Kelly  Dayan,  manager  of  business 
opportunities  for  IT. 

Bullish  on  ROI 

For  the  past  three  years,  Merrill 
Lynch  has  required  a  risk-and-payback 
analysis  for  every  technology  initiative 
that  costs  more  than  $2.5  million.  The 
process  is  similar  to  how  Merrill  Lynch 
would  measure  a  capital  investment  in 
real  estate,  for  example. 

This  year,  there  will  be  50  to  100  IT 
projects  evaluated,  quite  a  bit  fewer 


than  the  230  the  brokerage  reviewed  in 
2000,  given  the  restraints  of  the  reces¬ 
sionary  economy. 

Merrill  Lynch  launched  its  ROI 
methodology  three  years  ago.  Before 
then,  every  technology  purchasing  de¬ 
cision  was  made  by  technologists.  Now, 
other  than  technology  infrastructure 
investments,  all  IT  decisions  are  “made 
by  business  people,  with  technology 
people  sitting  next  to  them,”  Balliet  says. 

Standing  review  committees  in  each 
of  Merrill  Lynch’s  business  units  are 
made  up  of  managers  from  the  busi¬ 
ness,  finance  and  technology  depart¬ 
ments  who  meet  monthly  and  assign 
low,  medium  or  high  probabilities  to 
the  expected  benefits  of  a  project. 

When  Balliet  started  the  process 
in  late  1998,  there  were  seven  review 
standards,  or  templates,  that  manage¬ 
ment  at  Merrill  Lynch  used  to  evaluate 
projects,  each  one  favoring  its  own 
business  area.  Now  a  single,  standard 
six-page  template  is  used  that  poses 
yes-or-no  questions  to  evaluate  project 
success  factors. 

The  document  is  coupled  with  a  de¬ 
tailed  five-page  financial  report.  Ques¬ 
tions  asked  include,  “Is  the  success  of 
this  project  dependent  on  another 
business  or  technology  unit?”  and 
“Have  the  business  functions  and  the 
data  requirements  been  identified  and 
agreed  to  with  the  business  units?” 

“The  business  person  and  the  tech¬ 
nology  person  sit  down  together,  and 


it’s  an  agreement  between  the  two 
sides  before  we  start  to  spend,”  says 
Balliet.  “The  only  rule  to  this  is  that 
the  process  has  to  be  assigned  to  the 
business  people;  it  cannot  be  assigned 
to  the  technology  people.” 

At  Compaq,  a  similar  combination  of 
business  and  IT  leaders  has  helped 
guide  internal  IT  decisions  for  the  past 
two  years,  as  the  company  has  integrat¬ 
ed  the  management  methods  and  tech¬ 
nologies  of  Tandem  Computer  Systems 
Inc.  and  Digital  Equipment  Corp., 
which  it  acquired  in  the  late  1990s. 

Each  of  Compaq’s  eight  business 
units  has  a  vice  president  of  IT.  They 
form  the  core  of  the  CIO’s  staff.  This 
arrangement  began  when  Compaq’s 
former  CIO,  Michael  Capellas,  moved 
to  the  position  of  CEO  in  July  1999, 
helping  give  life  to  the  new  method. 

Worth  the  Effort 

There  are  1,134  internal  IT  projects 
being  reviewed  at  Compaq,  and  no 
project  can  remain  on  the  list  for  more 
than  a  year.  Compaq  uses  a  global  proj¬ 
ect  management  system  called  Team- 
Play  from  Primavera  Systems  Inc.  in 
Bala  Cynwyd,  Pa.,  to  help  managers 
use  consistent  tools  to  monitor  proj¬ 
ects  in  other  continents. 

Projects  valued  at  more  than 
$500,000  get  extra  scrutiny  from  a  sys¬ 
tem  review  board  at  Compaq  that  in¬ 
cludes  the  CIO,  CFO  and  executive 
vice  presidents  of  sales  and  service 


and  product  development. 

The  process  was  “a  little  painful”  dur¬ 
ing  the  time  Compaq  was  in  the  midst 
of  absorbing  Tandem  and  Digital,  since 
there  were  cultural  changes  that  were 
a  big  challenge,  says  Don  Kinsberry,  di¬ 
rector  of  worldwide  program  manage¬ 
ment.  “Getting  everybody  to  contribute 
to  a  standard  system  was  a  challenge, 
but  it  has  had  a  great  payback,”  he  says. 

Compaq  executives  believe  that 
the  biggest  achievement  from  its  ROI 
methodology  has  been  the  alignment 
of  its  proposed  IT  projects  with  its 
global  blueprint  for  IT.  And  Merrill 
Lynch  has  seen  a  similar  alignment, 
as  well  as  a  drastic  reduction  in  the 
number  of  projects  with  cost  overruns. 

Neither  company  would  describe 
specific  cost  savings.  However,  both 
Marcoccio  and  Isfahani  say  the  savings 
probably  amount  to  millions  of  dollars 
annually  for  each  company. 

Before  Merrill  Lynch  launched  its 
ROI  program,  about  half  of  its  projects 
ran  above  cost  and  never  delivered  all 
the  promised  benefits,  Balliet  says. 
Now  the  number  of  individual  projects 
that  exceed  costs  is  down  to  10%.  In 
fact,  the  process  works  so  well  that 
when  there  is  an  overrun,  “the  man¬ 
agers  have  to  find  other  places  in  the 
budget  to  pay  for  the  overrun  than  the 
technology  line,”  he  says. 

“We’ve  made  it  painful  for  the  busi¬ 
ness  people  who  don’t  engage  in  the 
process,”  Balliet  adds.  ► 


Setting  Up  an  ROI  Methodology 


Create  an  ROI  program  that’s  headed  by  an  official  in  the  CFO’s  office  who 
becomes  the  ROI  guru. 

In  addition  to  calculating  ROI,  the  ROI  guru  should  serve  as  an  evangelist 
throughout  the  company,  promoting  ROI  and  how  to  implement  it. 

The  ROI  guru  should  hold  weekly  or  biweekly  meetings  with  business  and  IT 
players  to  create  a  standard  method  for  ROI  measures.  After  three  months,  they 
should  develop  a  template  of  measures  to  be  used  for  future  IT  projects. 

The  ROI  guru  must  get  the  CFO  and  CIO  to  buy  into  the  strategy  that  the 
business  and  IT  players  have  developed. 

Create  a  “life  cycle  cost  of  ownership”  method  for  measuring  IT  projects. 
During  the  implementation  phase,  the  ROI  guru  can  derive  data  on  full  life  cycle 
costs  for  each  IT  function.  These  should  then  be  measured  for  each  new  project. 


SOURCE  LOU  MARCOCCIO.  MARCOCCIO  CONSULTING.  WESTOBORO.  MASS 
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There's  a  Dell  PowerEdge  server 
for  every  kind  of  business. 

From  "kind  of  start  up"  to  "kind  of  FORTUNE  500f" 


Ask  about 


No  matter  the  size  of  your  company,  we've  got  a  server  that  fits.  Dell  PowerEdge  servers  with  Windows®  2000  Server  have  many  amazing  "abilities": 
scalability,  availability,  manageability  and  serviceability.  So  they  grow  with  your  business,  minimize  downtime,  are  easy  to  integrate  and  even  easier  to  support.  /  V 
No  matter  what  your  business  needs  -  from  file/print  to  database  management  -  you  can  choose  the  Microsoft®  Windows®  2000  Server  operating  system  that 
is  right  for  you.  And,  by  dealing  directly  with  Dell,  you  get  a  system  customized  to  fit  your  business  needs,  at  an  affordable  price,  backed  by  our  award-winning 


P/o 


QuickLease" 

ffK  qUCliftM  It)  j'WTiSrs 


service  and  support.  It's  a  nice  mix  of  exactly  the  server  you  need  and  exactly  the  operating  system  you  want. 


Dell  |  Small  Business 


PowerEdge™  1500SC  Server 


NEW  Simple  and  Strong  Server 

•  Intel* *  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (1  OK  RPM)  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Gigabit  NIC 

•  1  -Yr  Next  Business  Day  On-Site  Service,1 1-Yr  Limited  Parts 
Warranty,'  1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 


$1299© 


Quick  Loan:  $35/mo.,  48  mosi’ 

E-VALUE  Code: 
11068-290312 


Recommended  upgrades: 

•  NEW  PowerConnect"  2124*  24-Port  Unmanaged  Switch 
with  Gigabit  Port,  add  $299 

•  System  Including  Small  Business  Server  2000  and 
Memory  Upgrade  to  256MB  is  $2699 


Dell  Rated  #1  in  Intel  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 

3rd  Quarter 
-  December  2001 


PowerEdge™  2500  Server 

Robust  and  Scalable  Server 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB1 110K  RPM)  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel*  10/100  NIC 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Hot-Plug,  Redundant  Power  Supplies 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  3-Yr  Next  Business  Day  On-Site  Service1 


$1899 


QuickLoan:  $50/mo.,  48  mos." 

©E-VALUE  Code: 

1 


'11068-290318 


Recommended  upgrades: 

•  PowerConnect"  3024*  24-Port  Managed  Switch,  add  $699 

•  System  Including  Windows*  2000  Server  is  $2699 


PowerEdge™  1650  Server 

NEW  Highly  Available  1U  Rack-Optimized  GP  Server 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GBS  (1  OK  RPM)  Ultra3  SCSI  Hard  Drive 

•  Dual  Embedded  Gigabit  NICs 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service1 


PowerEdge™  2550  Server 

2U  Rack-Optimized  Performance  and  Scalability 

•  Intel"  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM 

•  18GB5  (10K  RPM)  Ultra3  SCSI  Hard  Drive 

•  Dual-Channel  Integrated  Ultra3  SCSI  Controllers 

•  2  Embedded  NICs  -  One  Gigabit  and  One  Intel*  10/100 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service1 


<|ij  AAA  QuickLoa 

$1699© 


QuickLoan:  $45/mo.,  48  mos!1 

E-VALUE  Code: 
11068-290316 


$1799  o 


QuickLoan:  $48/mo„  48  mosV 

E-VALUE  Code: 
11068-290317 


Recommended  upgrade: 

•  System  Including  Windows*  2000  Server  is  $2499 


Recommended  upgrades: 

•  Redundant  Power  Supplies,  add  $229 

•  System  Including  Windows*  2000  Server  is  $2599 


pentium  •/// 


Servers  for  any  size  business. 


Easy  as 


D*LL 


Visit  www.dell.com/computerworld  or  call  toll  free  1-800-953-6011. 


,  „  Dell  PCs  use  genuine  Microsoft®  Windows® 

Call:  M-F  7a-8p  Sat  8a-5p  CT  -  ,.  ,  . 

Pricing,  specifications,  availability  and  terms  of  offer  may  change  without  notice  faxes  and  shipping  charges  extra,  and  vary  U  S  Doll  Small  Business  (BSD  and  BASDl  new  purchases  only  Dell  cannot  he  held  WWW.miCr0S0Il.C0ni/piracy/n0Wt0teil 
responsible  fot  errors  in  typography  or  photography. 


"This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment  This  device  is  not,  and  may  not  be,  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a 
residential  environment  until  the  approval  of  the  FCC  has  been  obtained. 

'For  a  copy  of  our  Guarantees  or  Limited  Warranties,  write  Dell  USA  L.P.,  Attn:  Warranties.  One  Dell  Way,  Round  Rock.  Texas  78682,  'Service  may  be  provided  by  third  party.  Technician  will  be  dispatched,  if  necessary, 
following  phone-based  troubleshooting  To  receive  Next-Business-Day  service.  Dell  must  notify  service  provider  before  5  pm  (depending  on  service  contractl  customer's  time.  Availability  varies  For  hard  drives,  G8  means 
t  billion  bytes:  accessible  capacity  varies  with  operating  environment.  ’  Monthly  payment  is  based  on  a  48  month  12.49%  interest  rate  for  qualified  business  customers.  Your  interest  rate  and  monthly  payment  may  be 
same  or  higher,  depending  on  your  creditworthiness.  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  8Y  IENDER  Taxes,  fees  and  shipping  charges  are  extra  and  may  vary  Minimum 
transacnon  size  of  $500  is  required.  Maximum  aggregate  financed  amounts  not  to  exceed  $25,000.  Not  valid  on  past  orders  or  financing  QuickLoan  is  from  CIT  OnLine  Bank  to  Del!  Small  Business  (BSD)  customers  with 
approved  credit  'QuickLease  arranged  by  Dell  Financial  Services  L.P..  an  independent  entity,  to  qualified  Small  Business  (BSD  and  BASD)  customers.  0%  leasing  offer  only  applicable  for  a  24  month  Fair  Market  Value 
(flMVI  QuickLease  and  valid  on  hardware  products  only.  Applicable  taxes,  fees  and  shipping  not  included.  Minimum  transaction  size  of  $500  is  requited.  At  the  end  of  the  FMV  QuickLease  term,  the  Lessee  shall  have  the 
following  options  Purchase  the  equipment  for  the  then  FN4V,  renew  the  lease  or  return  the  equipment  to  the  Lessor.  Please  contact  your  Del!  Financial  Services  representative  for  further  details  AJI  terms  are  subject  to 
credit  approval  and  availability  and  are  subject  to  change  without  notice.  Not  valid  on  past  orders  or  leases.  Dell,  the  stylized  E  logo,  E-Value,  PowetEdge  and  PowerConnect  are  trademarks  of  Dell  Computer  Corporation 
Intel,  Intel  Inside.  Pentium  and  Celeron  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  MS,  Microsoft,  and  Windows  are  registered  trademarks  of 
Microsoft  Corporation.  ©2002  Dell  Computer  Corporation.  All  rights  reserved. 
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USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 

with  our  latest  prices.  Enter  the 

VALUE 

E- VALUE  code  online  or  give  it 
to  your  sales  rep  over  the 
phone  www. dell  com/evalue 
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Federal  IT  workers  are 
retiring  in  droves  -  and  there 
are  too  few  replacements 
in  sight.  By  Gary  H.  Anthes 


TRUGGLING  TO  FIND  top-notch 
IT  workers?  Perplexed  about 
where  to  find  the  funding  to  pay 
those  six-figure  salaries  for  IT 
specialties?  Cheer  up  —  it  could 
be  worse. 

You  could  have  Joyce  France’s  job. 

France  is  the  division  chief  for  IT 
workforce  management  in  the  CIO’s 
office  at  the  U.S.  Department  of  De¬ 
fense  (DOD),  which  employs  161,000 
IT  professionals.  More  than  one-third 
of  the  75,000  civilian  IT  workers  at  the 
DOD  are  over  50  years  old,  and  many 
are  eligible  to  retire  now.  “Thirty-six 
percent  are  at  the  door,”  is  the  way 
France  puts  it. 

For  France,  the  challenge  of  hiring 
tens  of  thousands  of  IT  workers  over 
the  next  few  years  isn’t  simply  a  num¬ 
bers  game.  Certain  specialities  are  in 
critically  short  supply.  For  example, 
during  the  past  few  years,  information 
security  specialists  have  been  avidly 
sought  by  federal  agencies  whose  sys¬ 


tems  have  been  repeatedly  attacked. 

And  after  Sept.  11,  the  demand  for 
security  skills  soared  still  higher.  “The 
needs  are  greater  for  security  people 
now,”  France  says.  “We  lost  a  lot  of 
people  at  the  Pentagon,  and  we  need  to 
get  people  in  quickly.” 

The  imminent  shortage  of  IT  profes¬ 
sionals  is  by  no  means  limited  to  the 
Defense  Department.  Federal  employ¬ 
ees  can  retire  at  age  55,  and  29%  of  all 
government  IT  workers  are  now  over 
the  age  of  50,  says  Fred  Thompson,  an 
assistant  director  in  the  CIO’s  office  at 
the  U.S.  Department  of  the  Treasury. 

Replacing  those  workers  will  be  dif¬ 
ficult,  according  to  the  National  Acad¬ 
emy  of  Public  Administration  (NAPA) 
in  Washington.  NAPA  estimates  that 
the  government  will  need  to  hire 
45,000  IT  workers  in  the  next  10  years. 

Although  innovative  approaches  to 
recruiting,  hiring  and  retention  have 
been  under  way  in  pockets  of  the  gov- 
Continued  on  page  38 
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THE  DEFENSE  DEPARTMENT  is  awarding  IT 
professionals  more  bonuses,  but  compensa¬ 
tion  rates  for  government  IT  workers  still 
aren’t  as  highas  they  need  to  be,  says  Joyce 
France,  an  IT  workforce  management  official 
at  the  DOD.  • 


THE  VISITORS  FROM  A  PARALLEL  UNIVERSE  SOUGHT  DATA  INTEGRITY  OF  THE  HIGHEST  ORDER. 

TIVOLI  for  STORAGE  MANAGEMENT 

|  SOFTWARE  OF  CHOICE  ON  OVER  ONE  MILLION  SYSTEMS  WORLDWIDE  | 


IT’S  A  DIFFERENT  KIND  OF  WORLD. 
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Continued  from  page  36 
ernment  for  some  time,  effective  prac¬ 
tices  have  been  slow  to  catch  on  across 
all  agencies. 

In  an  August  report  titled  “The 
Transforming  Power  of  IT:  Making  the 
Federal  Government  an  Employer  of 
Choice  for  IT  Employees,”  NAPA  said, 
“There  is  a  crisis  looming  that  if  un¬ 
resolved  will  imperil  the  ability  of 
federal  agencies  to  carry  out  their  mis¬ 
sions.  In  a  matter  of  years,  the  federal 
government  is  in  danger  of  having  a 
significant  shortfall  in  its  workforce  of 
IT  professionals  who  can  develop,  im¬ 
plement  and  manage  IT  systems  and 
provide  expert  policy  and  procure¬ 
ment  guidance.” 

In  the  report,  NAPA  identified  the 
following  problems: 

■  Skills  shortage:  There’s  a  signifi¬ 
cant  shortage  of  IT  professionals  na¬ 
tionwide,  and  the  situation  isn’t  ex¬ 
pected  to  improve  for  at  least  20  years. 

■  Aging  workforce:  More  than  half 
of  federal  IT  employees  will  be  eligible 
to  retire  within  the  next  10  years. 

■  Pay  gap  with  the  private  sector:  At 
the  mid-  and  senior  management  lev¬ 
els,  there  isn’t  a  single  position  in 


which  government  salaries  meet  in¬ 
dustry  averages,  with  most  positions 
falling  significantly  lower. 

■  A  broken  recruitment  system: 
Delays  that  can  last  for  months  mean 
well-qualified  candidates  accept  other 
jobs  before  the  government  can  make 
an  offer. 

■  Compensation  policies  aren’t 
attractive  to  private-sector  IT  profes¬ 
sionals:  The  federal  personnel  system 
rewards  workers  for  longevity  of  ser¬ 
vice,  while  most  IT  professionals 
prefer  compensation  based  on  perfor¬ 
mance. 

■  Too  little  investment  in  continual 
learning:  This  failure  is  especially 
problematic  in  the  rapidly  changing 
world  of  IT. 

NAPA  made  10  recommendations 
for  helping  federal  agencies  retain  and 
recruit  IT  workers,  including  pegging 
IT  pay  to  market  rates;  streamlining 
hiring  processes;  rewarding  workers 
more  for  performance;  and  giving  man¬ 
agers  more  flexibility  in  hiring,  pro¬ 
moting  and  compensating  employees. 

Federal  agencies  are  taking  some 
steps  to  deal  with  widespread  IT  re¬ 
tention  and  recruitment  problems.  In 


PRIVATE 

PRACTICES 


When  the  Federal  CIO  Council  (www. 
cio.gov)  set  out  last  year  to  find  ways  to 
improve  the  government's  hiring  and 
retention  of  IT  workers,  it  looked  for 
best  practices  inside  and  outside  the 
government.  Here  are  a  few  that  it 
found: 


1  CIGNA  CORP.,  a  Philadelphia- 
based  provider  of  employee  bene¬ 
fits  services,  enables  employees  to 
study  for  bachelor’s  degrees  at  work 
and  permits  University  of  Pennsylvania 
professors  to  teach  courses  at  compa¬ 
ny  facilities.  More  than  97%  of  gradu¬ 
ates  remain  at  the  company. 


FLEETBOSTON  FINANCIAL  CORP. 

provides  snow-day  child  care.  The 
services  are  held  in  office  confer¬ 
ence  rooms,  and  the  Boston-based 
bank  provides  materials  for  crafts, 
games  and  snacks.  A  contract  day  care 


provider  manages  the  program. 


3  FREDDIE  MAC  (Federal  Home 
Mortgage  Corp.)  in  McLean,  Va„ 
boosts  employee  retention  through 
its  Transition  Program.  Non-IT  employ¬ 
ees  who  would  otherwise  be  laid  off 
are  redirected  into  IT  positions  with 
computer-based  and  classroom  train¬ 
ing  taught  by  outside  consultants  and 
Freddie  Mac’s  own  IT  staff. 


4ASG  RENAISSANCE,  a  personnel 
staffing  and  project  management 
firm  in  Southfield,  Mich.,  uses 
anonymous  surveys  to  encourage  frank 
communication.  The  semiannual  sur¬ 
veys  focus  on  teamwork  issues.  The  re¬ 
sults  are  summarized  and  distributed  to 
employees,  and  managers  use  them  to 
develop  action  plans  and  to  modify  or 
expand  benefits. 

-  Gary  H.  Anthes 


January  2001,  the  U.S.  Office  of  Person¬ 
nel  Management  (OPM)  increased  pay 
raises  from  7%  to  33%  for  33,000  low¬ 
er-level  IT  workers. 

In  June,  the  OPM  created  10  cate¬ 
gories  of  IT  jobs  —  such  as  security, 
data  management  and  systems  analysis 
—  to  replace  the  catchall  “computer 
specialist”  job  classification,  and  it  cre¬ 
ated  evaluation  criteria  for  each  job 
description.  It  did  not,  however,  vary 
pay  or  benefits  by  category  to  match 
private-sector  rates. 

The  OPM  also  created  IT  qualifica¬ 
tion  standards  that  consider  skills  and 
competence  in  addition  to  education 
and  experience.  The  standards  are  be¬ 
ing  piloted  at  11  agencies. 

Not  Enough 

Although  all  of  these  actions  are 
positive  steps,  none  of  them  goes  far 
enough,  says  Thompson  at  the  Trea¬ 
sury  Department,  where  11%  of  the 
agency’s  7,000  IT  workers  will  become 
eligible  for  retirement  this  year. 

“We  worked  with  OPM  to  create 
those  10  subcategories,  but  we  still  pay 
all  of  those  people  the  same  based  on 
skill  levels  and  supervisory  responsibil¬ 
ities,”  he  says.  “Until  we  get  to  the  next 
step  and  tie  the  specialities  to  what 
they  are  making  in  the  private  sector, 
we  won’t  have  solved  the  problem.” 

In  the  meantime,  some  Treasury  De¬ 
partment  bureaus  are  experimenting 
with  options  permitted  under  current 
regulations.  The  U.S.  Bureau  of  Alco¬ 
hol,  Tobacco  and  Firearms  is  partici¬ 
pating  in  a  demonstration  project  for 
enforcement  agencies  that  allows  in¬ 
centive  pay,  certification  bonuses,  and 
retention  and  recruitment  bonuses. 

And  the  office  of  Treasury  Inspector 
General  for  Tax  Administration  is  pay¬ 
ing  retention  bonuses  to  21%  of  its  IT 
workers  with  certain  critical  skills.  “If 
you  think  your  employee  is  about  to  go 
to  private  industry,  you  can  offer  them 
a  retention  allowance,”  says  Dagne 
Fulcher,  program  manager  for  IT 
Workforce  Improvement  at  the  Trea¬ 
sury  Department’s  CIO’s  office.  Those 
bonuses  are  paid  continuously  and 
range  up  to  25%  of  base  pay. 

The  DOD  has  stepped  up  its  use  of 
recruitment  and  retention  bonuses,  of¬ 
fering  450  in  the  past  12  months,  com¬ 
pared  with  30  three  years  ago,  France 
says.  “But  it’s  still  not  up  to  where  I’d 
like  it  to  be  because  of  the  culture  and 
mind-set,”  she  says. 

Indeed,  the  bureaucratic  mind-set 
stands  in  the  way  of  a  great  deal  of  im¬ 
provement  in  the  hiring,  retention  and 
motivation  of  federal  IT  workers,  says 
Costis  Toregas,  president  of  Public 


There  is  a  crisis  looming 
that  if  unresolved  will 
imperil  the  ability  of 
federal  agencies  to  carry 
out  their  missions.  In  a 
matter  of  years,  the 
federal  government  is  in 
danger  of  having  a 
significant  shortfall  in 
its  workforce  of  IT 
professionals  who  can 
develop,  implement  and 
manage  IT  systems  and 
provide  expert  policy  and 
procurement  guidance. 

NAPA  REPORT,  AUGUST  2001 

Technology  Inc.,  a  Washington-based 
nonprofit  organization  that  promotes 
the  use  of  technology  in  city  and  coun¬ 
ty  governments.  Toregas  chaired  the 
NAPA  panel  that  wrote  the  report  on 
federal  IT  workers. 

“We  found,  much  to  our  surprise, 
that  some  80%  of  our  recommenda¬ 
tions  could  be  covered  under  existing 
legislative  authority,”  Toregas  says.  He 
says  numerous  trials  of  the  ideas  set 
forth  by  NAPA  have  been  under  way, 
some  for  years,  without  spreading  to 
other  parts  of  government. 

Nevertheless,  there  have  been  some 
successes.  The  U.S.  Department  of 
State  and  the  Internal  Revenue  Service 
pioneered  IT  job  fairs  two  years  ago. 
Now,  the  first  governmentwide  job  fair 
is  being  organized  by  an  interagency 
group.  It  will  be  held  in  mid-  to  late 
April  as  a  virtual  event,  where  job  ap¬ 
plicants  inside  and  outside  the  govern¬ 
ment  can  visit  the  fair’s  Web  site,  learn 
of  IT  job  openings  and  the  qualifica¬ 
tions  needed  for  them  and  then  apply 
online.  Job  offers  can  follow  in  days, 
not  months.  ) 


,1t-  To  read  about  best  IT  practices  at 
A  government  agencies  and  to  dis¬ 
cover  what  IT  workers  who  have 
worked  in  both  the  public  and 
private  sectors  have  to  say  about  the  pros  and  cons  of 
each  environment,  goto 
www.computerworld.com/q728168 
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THEY  CAME  HERE  FROM  A  PARALLEL  UNIVERSE.  THEY  NEEDED  SOFTWARE.. .  TO  GO! 


LOTUS  FOR  WIRELESS 


I  Log  Entry,  Day  25:  Eureka!  We  have  found  Lotus  wireless  software.  With  it,  mobile  knowledge  workers 
can  access  corporate  applications  via  PDA,  cell  phone  or  other  wireless  devices.  This  lets  them  update  critical 
work  in  real  time  -  quite  advanced.  A  most  informative  whitepaper  can  be  found  at  lotus.com/visitwireless 


IT’S  A  DIFFERENT  KIND  of  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 
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■ft  Dear  Career  Adviser: 

I  have  a  degree  in  computer  science  and  four  years'  expe¬ 
rience  with  Java ,  C++  and  HTML.  I  have  worked  in  two 
software  start-ups  that  no  longer  exist.  My  goal  is  to 
become  the  chief  architect  for  an  e-commerce  software 
development  effort.  —  Small  Fish  to  Big  Pond 


Dear  Pond: 

Growing  your  career  into  a 
chief  architect’s  role  encom¬ 
passes  three  primary  areas, 
notes  Kim  Poindexter,  vice 
president  of  software  develop¬ 
ment  at  FileNet  Corp.  in  Costa 
Mesa,  Calif.,  a  company  spe¬ 
cializing  in  enterprise  content 
management  for  e-business. 

First,  this  role  requires  a 
broad  understanding  of  e-com- 
merce  and  current  Internet 
technologies.  Second,  you  must 
understand  the  standards  de¬ 
ployed  in  your  field  and  the 


rationale  behind  your  choices, 
as  well  as  behind  the  choices 
made  by  your  company’s  com¬ 
petitors.  Lastly,  you  must  grasp 
the  business  problem  you  are 
solving  and  understand  how 
your  development  efforts  are 
key  to  the  solution. 

Grooming  yourself  for  a 
chief  architect’s  spot  requires 
getting  yourself  into  a  larger, 
more  stable  company,  advises 
Poindexter.  You  need  to  select 
a  place  where  you  can  spend 
at  least  a  year  to  18  months 
working  on  a  project  —  from 
concept  through  delivery  and 


deployment  —  that  solves  a 
complex,  real- 
world  problem. 

You  must  be  at  the 
company  long 
enough  to  work 
through  the  long¬ 
term,  sustaining 
issues  of  your  de¬ 
velopment  effort. 

In  interviews, 
companies  are 
more  apt  to  want 
to  groom  you  for  a 
chief  architect’s 
role  if  you  show 
insight  regarding 


the  technical  problems  you’ve 
solved  and  why  you  selected 
a  particular  way  of  solving  a 
problem  from  an  architectural 
point  of  view. 

Dear  Career  Adviser: 

I  will  get  out  of  the  Air  Force 
fairly  soon  and  have  been  work¬ 
ing  in  a  network  management 
shop  for  the  past  three  years. 

I  have  some  skills  in  LANs, 
WANs,  Cisco  routers  and 
switches,  firewall  administra¬ 
tion  and  antivirus  software.  I 

have  thought  about 
becoming  a  disas¬ 
ter  recovery  expert 
and  want  to  inves¬ 
tigate  this  field  as 
a  postmilitary  ca¬ 
reer  strategy. 

—  Wisconsin 

WINGS 

Dear  Wings: 

Your  network¬ 
ing  skills  are  only 
part  of  a  major 
company’s  total  IT 


fran  quittel  is  an  expert 
in  high-tech  careers  and 


recruitment.  Send 
questions  to  her  at 

www.computerworld.com/ 

career_adviser. 


WORKSTYLES 

High  Performance  Rules 
At  International  Truck 


Rick  Herbst,  manager  of  Proj¬ 
ect  Office  Integration  at  In¬ 
ternational  Truck  and  Engine 
Corp.,  discusses  the  emphasis 
on  performance  and  account¬ 
ability  in  his  shop. 

What  are  the  most  critical  sys¬ 
tems  supported  or  developed  by 
your  department  on  a  daily  ba¬ 
sis?  “Within  my  department 
[which  has  eight  employees], 
we  support  global  project 
management  and  Baan  ad¬ 
ministration.  Supporting  the 
Baan  package  is  the  most 
critical  thing  going  on  in  my 
own  area.  If  the  systems  are 
down,  potentially  the  plants 
can  be  shut  down.” 

What  do  you  think  makes  your 
company’s  IT  department 


unique?  “In  1997,  our  presi¬ 
dent  and  CEO,  John  Horne, 
was  very  committed  to 
changing  our  culture  to  a 
high-performance  culture. 
Some  people  perceived  it 
as,  ‘Here  we  go  again.’  But 
he  was  committed  to  rolling 
it  out  to  the  entire  organiza¬ 
tion,  from  upper  manage¬ 
ment  down  to  the  union. 

And  it’s  still  active  today. 

In  fact,  our  most  recent  hire 
came  on  nine  months  ago, 
and  he  just  went  through  a 
three-day  training,  culture 
and  team-building  workshop. 
So  it’s  still  alive  and  well. 

“The  culture  is  based  on 
core  values:  Respect  for  peo¬ 
ple,  accountability,  pursuit  of 
quality,  customer  focus  and 
communication,  as  well  as 


innovation,  speed,  simplicity 
and  agility.  All  those  things 
are  common  sense,  but  by 
going  through  it  with  em¬ 
ployees,  we  developed  a 
common  language  and 
framework  that  allows  us  to 
talk  openly  and  freely.  For 
instance,  it’s  OK  to  challenge 
something  if  you  do  so  re¬ 
spectfully.” 

What  is  an  example  of  how  you 
live  out  these  core  values? 

“One  example  in  the  Baan 


administration  world  is  when 
we  have  to  go  through  the 
process  of  implementing 
customizations  to  the  appli¬ 
cation.  It  can  be  a  very  man¬ 
ually  intensive  process  to 
roll  out  that  software  to  all 
the  different  environments. 
So  the  team  got  together  and 
developed  some  tools  to  get 
the  package  turnover  through 
the  group,  as  well  as  some 
scripts  that  let  them  roll  it 
out  to  other  environments. 

. . .  Now,  people  can  go  home 
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disaster  recovery  plan,  notes 
Roseann  McSorley,  director 
of  business  continuity  man¬ 
agement  for  the  Americas  at 

Deutsche  Banc  in  New  York, 

% 

which  relocated  four  down¬ 
town  facilities  to  an  alternate 
New  Jersey  site  after  the  ter¬ 
rorist  attacks  on  Sept.  11. 

Disaster  recovery  planning 
requires  having  a  detailed 
multisite  recovery  strategy 
in  place.  However,  even  after 
Sept.  11,  companies  aren’t 
adding  disaster  recovery  jobs, 
per  se.  Instead,  disaster  recov¬ 
ery  teams  typically  have  one 
person  as  the  command  offi¬ 
cer  formulating  a  company’s 
disaster  recovery  strategy, 
with  team  members  usually 
integrated,  or  “matrixed,”  into 
the  total  organization. 

In  fact,  notes  McSorley, 
you’re  most  likely  to  become  a 
key  part  of  a  disaster  recovery 
effort  if  you  have  a  background 
in  or  are  working  in  large-scale 
enterprise  application  devel¬ 
opment  with  disaster  recovery 
responsibilities  tacked  on  to 
your  regular  IT  duties.  I 


and  spend  time  with  their 
families,  and  if  there’s  a 
problem,  they  will  be  auto¬ 
matically  notified.” 

How  would  you  describe  your 
company's  overall  culture  of 

IT?  “It’s  casual  across  the 
board.  The  company  is  also 
very  much  aware  of  the  bal¬ 
ance  of  work  and  family  life 
and  supports  flexible  work 
hours  and  telecommuting.” 

What  aspect  of  work  do  you 
look  forward  to  each  day? 

“The  sense  of  accomplish¬ 
ment  of  delivering  a  quality 
product.” 

What  aspect  do  you  dread  each 
day?  “If  we’ve  got  a  problem 
that’s  affecting  a  customer, 
like  if  the  system  is  down, 
that’s  what  I  dread  —  im¬ 
pacting  the  productivity  and 
performance  of  our  cus¬ 
tomer.” 

-  Mary  Brandel 
thebrandels@hotmail.  com 
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DB2  for  INSIG 

|  MAXIMIZE  UNUSED  DATA  WITH  DB2  BUSINESS  INTELLIGENCE  | 


You  won't  see  the  next  network 
security  threat  coming. 


STAT/V 


When  the  next  Code  Red,  Goner 
or  Nimda  comes  along,  5TAT 
could  be  the  difference  between 
a  crippled  system  and  one  that's 
completely  unaffected. 


But  STATwill. 

Arming  yourself  against  the  next  threat  requires  more  than  vigilance.  It  requires  a  new  level  of  defense. 
At  Harris,  we  know;  for  more  than  25  years,  we've  helped  keep  government  networks  secure — and 
now  we're  helping  businesses  stay  ahead  of  the  enemy  with  our  5TAT  intrusion  prevention  tools.  For 
example,  STAT  NeutralizerT"proactively  protects  servers  and  workstations  by  using  behavioral 
analysis  to  prevent  intrusions  and  malicious  activities  from  taking  place.  STAT  Neutralizer  provides  a  new 
layer  of  security  to  defend  your  network  during  its  most  vulnerable  time —  before  an  anti-virus 
update  can  be  downloaded.  And  that's  just  the  beginning  of  what  STAT  can  do.  To  start  winning  the 
war  on  cyberattacks,  call  1  -888-725-STAT  (7828)  today  or  visit  our  website. 


next  level  solutions 


STAT  ANALYZER 
STAT  NEUTRALIZER 
STAT  SCANNER 
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TECHNOLOGY 


THIS  WEEK 


FIELD  REPORT: 
VISUALSTUDIO.NET 

Visual  Studio  .Net,  the  primary 
development  aid  for  Microsoft’s 
.Net  platform,  encompasses  a  wide 
range  of  tools  and  capabilities. 

The  marquee  feature  of  Visual 
Studio  .Net  is  its  deep  support  for 
both  producing  and  consuming 
Web  services.  PAGE  44 


WIRELESS  WORLD 

Computerworld  takes  a  look 
at  three  aspects  of  wireless 
technology: 

802.11b  NETWORKS:  Many 
companies  are  worried 
about  Wi-Fi  security,  but 
that  hasn’t  stopped  roll¬ 
outs,  according  to  several 
users.  We  describe  some  of 
their  deployments.  PAGE  46 
QUICKSTUDY:  Wireless 
LANs,  which  use  radio 
waves  instead  of  cable  to 
connect  laptops  and  other 
user  devices  to  networks, 
are  the  topic  of  this  week’s 
primer.  PAGE  50 
EMERGING  TECHNOLOGIES: 
Bluetooth,  the  short-range 
wireless  I/O  technology,  is 
finally  becoming  available 
in  on-the-shelf  products 
after  five  years  of  develop¬ 
ment.  PAGE  52 


SECURITY  JOURNAL 

Faced  with  thousands  of  firewall 
rules  and  many  different  devices  to 
manage,  security  manager  Mathias 
Thurman  looks  for  one  tool  to 
manage  them  all.  Just  when  he 
thinks  he  has  found  that  silver  bul¬ 
let,  he  realizes  that  there’s  no  easy 
way  to  convert  all  of  those  existing 
rule  bases.  PAGE  54 


NICHOLAS  PETRELEY 


Secrecy  Is  an  Illusion 

PHIL  ZIMMERMANN  says  he  doesn’t  regret  creating  the  Pretty 
Good  Privacy  (PGP)  strong  encryption  program,  even  though 
terrorists  may  use  it.  But  while  encryption  may  protect  our 
Internet  transactions  and  routine  communications,  it  would  be 
naive  to  think  that  governments  or  even  wealthy  companies  and 
individuals  can’t  get  around  it. 

I  happen  to  believe  that  if  our  investigative  agencies  can’t  crack  PGP 
by  now,  someone  isn’t  doing  his  job.  But  even  if  PGP  has  some  life  left, 


a  couple  of  recent  articles  exposed  how  easy  it  is  to 
spy  on  someone.  One  of  the  stories  discussed  a  tech¬ 
nology  that  decodes  the  flashing  lights  on  a  modem; 
the  other  is  about  finding  out  what’s  on  a  user’s 
screen  from  the  reflection  of  a  monitor’s  glow  on  the 
user’s  face. 

These  technologies  aren’t  really  as  cutting-edge  as 
they  sound,  but  they  have  Hollywood  written  all  over 
them.  No  doubt  the  next  Mission:  Impossible  sequel 
will  have  Tom  Cruise  run  a  video  of  a  suspected  ter¬ 
rorist  through  a  computer  that  transforms  the  glow 
on  the  terrorist’s  face  into  a  flawless  picture  of  what 
appeared  on  his  computer’s  monitor. 

By  the  way,  a  recent  story  in  Computerworld 
[Future  Watch,  March  11]  described  smart  mines  that 
wake  up  and  hop  over  to  fill  in  the  gaps  after  an 
enemy  clears  a  path  through  a  minefield.  I  can’t  wait 
to  see  Cruise  in  a  chase  scene  running  away  from  a 
hopping  explosive. 

If  there  is  any  lesson  to  be  learned  from  the  stories 
about  spy  technology,  it’s  that  secrecy  is  an  illusion. 
And  here’s  a  nonsecret  for  you:  It  has  been  that  way 
for  a  long  time.  Interpreting  the  lights  on  a  modem  is 
child’s  play.  It’s  almost  as  easy  to  read  the  radio  emis¬ 
sions  from  a  computer  monitor  to  reconstruct  what 
the  person  sees  on  the  screen.  It’s  not  nearly  as  easy 
to  reconstruct  a  monitor’s  contents  from 
the  glow  on  a  person’s  face  because  facial 
contours  complicate  the  process. 

But  aside  from  that,  it’s  a  reasonably 
straightforward  procedure  because  we 
know  how  monitors  work. 

Believe  it  or  not,  you  can  do  even  more 
sophisticated  snooping  without  having  to 
know  why  a  particular  technique  works. 

The  trick  is  to  combine  digital  signal  pro¬ 
cessing  with  statistics-based  pattern  recog¬ 
nition.  For  example,  suppose  you  want  to 
be  able  to  determine  what  someone  is  typ¬ 
ing  simply  by  pointing  a  directional  micro¬ 


phone  at  a  wall  outside  that  person’s  office. 

It’s  easy.  You  record  the  clicks  of  the  keyboard  as 
the  person  types  and  digitize  the  sounds.  Run  the 
data  through  various  analytical  routines,  such  as  a 
fast  Fourier  transform  or  a  program  that  detects  the 
envelope  of  each  click.  Then  put  this  data  through  a 
statistical  engine  to  see  which  approach  best  distin¬ 
guishes  one  key  from  another.  You  don’t  need  to 
know  why  one  method  is  better,  just  the  fact  that  it’s 
better. 

Once  you  choose  the  best  way  to  interpret  the  pat¬ 
ter,  all  you  need  to  do  is  map  the  distinctive  digital 
signatures  of  each  key  to  actual  letters  and  charac¬ 
ters.  This  part  is  no  more  difficult  than  solving  a 
cryptogram.  After  that,  you  can  turn  on  the  micro¬ 
phone,  and  your  snooping  device  will  display  in  real 
time  exactly  what  the  person  types. 

I’m  not  sure  when  the  foundation  for  spying  via 
digital  signal  processing  was  laid,  but  I  know  it  was 
well  under  way  by  the  early  ’80s  when  I  learned 
about  the  keyboard  trick.  These  days,  it’s  probably 
easier  to  sneak  a  keystroke-recording  program  onto  a 
computer,  and  there  are  always  brute-force  approach¬ 
es,  such  as  wiretaps,  hidden  cameras  and  long-range 
cameras.  But  as  you  can  imagine,  signal  processing 
opens  many  possibilities.  The  keyboard  example  is 
actually  a  trivial  problem  compared  with 
what  people  were  doing  with  digital  signa¬ 
tures  even  back  in  the  ’80s. 

I’d  like  to  think  that  by  now  we  could 
bounce  a  rock  off  a  cave  entrance  in 
Afghanistan  and  tell  from  the  sound 
whether  or  not  Osama  bin  Laden  is  in  the 
cave,  if  he’s  wearing  underwear,  the  color 
of  said  undergarment  and  how  long  it’s 
been  since  he  washed  it.  That  may  be  a 
stretch,  but  if  you  start  hearing  people 
bounce  pebbles  off  your  window,  I’d  rec¬ 
ommend  you  be  careful  about  your  hy¬ 
giene  and  what  you  wear.  I 
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Overview: 

Visual  Studio 
.Net 

The  recent  launch  of  Visual  Studio  .Net  and 
.Net  Framework  was  anticlimactic  for  some 
developers  who  had  already  deployed  applications 
and  Web  services  based  on  these  technologies. 
As  the  early  adopters  now  reflect  on  their 
experiences,  there  is  remarkable  consensus  about 
the  value  of  what  Microsoft  Corp.  has  achieved  and 
the  obstacles  that  still  lie  ahead. 

By  Jon  Udell 


Foundations  of 
The  .Net  Platform 


TECH  CHECK 


The  primary  development  tool 
for  .Net,  Visual  Studio  .Net,  is 
still  only  the  tip  of  a  very  large 
iceberg.  There’s  a  massive  infrastructure  below  the 
waterline,  years  and  billions  of  dollars  in  the  mak¬ 
ing,  encompassing  many  development  and  deploy¬ 
ment  tools  and  technologies. 

It’s  no  small  feat  to  develop  a  tool  that  encom¬ 
passes  such  a  bewildering  array  of  technologies. 
Visual  Studio  .Net  at  its  best  not  only  does  so,  it 
also  manages  to  unify  and  simplify. 

The  marquee  feature  of  Visual  Studio  .Net  is  its 
deep  and  elegant  support  for  both  producing  and 
consuming  Web  services.  In  an  Active  Server 
Pages  .Net  application,  a  few  annotations  —  [Web- 
Service]  or  [Web Method]  —  suffice  to  expose  a 


class  and  its  methods  as  Simple  Object  Access  Pro¬ 
tocol  (SOAP)-callable  services. 

Because  Visual  Studio  .Net  also  generates  the 
Web  Services  Description  Language  (WSDL)  file 
that  describes  the  service,  users  from  Visual  Stu¬ 
dio  .Net  or  from  many  other  SOAP-aware  pro¬ 
gramming  environments  can  more  easily  discover 
how  to  use  the  service.  In  Visual  Studio  .Net  itself, 
that  discovery  process  is  almost  miraculous. 

A  C#  or  Visual  Basic  .Net  programmer  who 
needs  a  service  adds  its  WSDL  file  to  the  Visual 
Studio  .Net  project  and  can  then  use  the  Intelli- 
Sense  feature  to  reveal  the  names  of  its  exported 
services,  and  the  names  and  types  of  the  methods 
and  their  arguments.  As  a  result,  services  become 
self-documenting  to  an  extraordinary  degree. 

To  the  extent  that  software,  from  now  on,  will 
increasingly  take  the  form  of  federations  of  loosely 
-coupled  services,  this  capability  —  which  makes 
ad  hoc  collaboration  almost  frictionless  — 
deserves  the  hype  it  has  attracted. 


Fewer  Plumbers 


FIELD  HOTES 


For  Jon  Rauschenberger,  director  of  technology 
at  Chicago-based  Clarity  Consulting  Inc.,  ASP 
.Net’s  improved  debugging  is  a  major  win,  as  is 
its  new  programming  model,  which  transmutes  HTML  widgets 
into  server-based,  event-driven  objects.  The  deep  object-orienta¬ 
tion  that  pervades  .Net  was  a  breath  of  fresh  air  for  Rauschenberg¬ 
er  and  his  team.  “We  could  do  objects  in  [Visual  Basic],"  he  says, 
“but  without  true  inheritance,  we  were  hamstrung." 

He  says  the  ability  for  developers  to  inherit  from  their  own  com¬ 
ponents,  from  other  developers'  components  and  from  .Net 
Framework  itself  is  a  huge  benefit.  For  example,  Rauschenberger 
notes  that  although  interoperability  of  Web  services  across  vendor 
implementations  isn't  yet  perfectly  smooth,  the  extensibility  of 
Framework  makes  it  possible  to  handle  such  problems.  “If  we 
don’t  like  how  some  implementation  serializes  a  SOAP  request,  we 


can  intercept  the  processing,  jump  in  and  make  it  work,”  he  says. 

Faster  Development 

For  Rodolfo  Soto,  vice  president  of  operations  at  Arboles  Tech 
nology  in  San  Jose,  Costa  Rica,  Visual  Studio  .Net’s  highlights  in¬ 
clude  the  following: 

■  The  Server  Explorer,  which  manages  operating  system  re¬ 
sources  within  the  Visual  Studio  .Net  environment. 

■  Stored-procedure  debugging,  which  makes  it 
possible  to  step  through  SQL  Server  stored  proce¬ 
dures,  just  like  with  C#  or  Visual  Basic  .Net  methods. 

■  ASP  .Net,  which,  he  says,  delivers  “Web  rapid  ap¬ 
plication  development  like  nothing  we've  seen  before, 
with  seriously  important  caching  and  tracing  features." 

Arboles  was  recently  contracted  to  provide  real¬ 
time  presidential  election  results  to  Costa  Rica’s 
largest  TV  station.  The  interchangeability  of  .Net  Ian-  SOTO:  .Net  ‘ 
guages  helped  Arboles  finish  the  two-week  project  on  us  three  full 


time.  “The  ability  to  use  our  languages  of  choice  in  an  integrated 
environment  saved  us  three  full  days,"  Soto  says. 

Powerful  Prototyping 

Although  it’s  possible  to  dive  into  the  plumbing,  Visual  Studio 
.Net  and  .Net  Framework  conspire  to  make  that  rarely  necessary. 
Together,  they  raise  the  development  of  applications,  components 
and  services  to  a  high  level  of  abstraction.  One 
outcome  is  the  re-empowerment  of  managers  and 
software  architects  who  formerly  had  to  delegate  pro¬ 
gramming  to  specialists.  Howard  Keziah,  chief  tech¬ 
nology  officer  at  Impact  Technologies  Group  Inc.  in 
Charlotte,  N.C.,  says  he  thinks  of  himself  primarily  as  a 
prototyper  and  designer.  Using  Visual  Studio  .Net,  he 
has  found  that  he  can  communicate  ideas  to  his 
teams  as  working  software.  “With  VB,  I  could  demon- 
‘saved  strate  user  interfaces,  but  .Net  is  so  rich  in  classes  that 
days.”  I  can  prototype  just  about  anything,"  he  says. 
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KEY  ELEMENTS  OF  THE  .NET  PLATFORM 

Common  Language  Runtime,  a  language-neutral,  object- 
oriented  virtual  machine. 

The  .Net  Framework,  a  vast  and  capable  class  library 
including  the  following  elements: 

■  ASP  .Net,  a  modernized  Web  application  server. 

■  ActiveX  Data  Objects  .Net,  which  bridges  SQL  and  XML 
data  management. 

■  WebForms  and  WinForms,  for  building  HTML  or  Win32 
applications  in  .Net  languages. 

■  A  suite  of  XML-based  Web-services  protocols, 

including  SOAP,  WSDL  and  Universal  Description, 

Discovery  and  Integration. 

The  WSDL  protocol  on  which  IntelliSense  de¬ 
pends  is,  admittedly,  still  a  bit  rough  around  the 
edges.  Services  that  produce  and  consume  simple 
strings  and  numbers  tend  to  interoperate  pretty 


well,  both  within  and  across  SOAP  implementa¬ 
tions.  Services  that  produce  complex  types  fare 
less  well,  mainly  because  the  paint  is  still  drying 
on  WSDL’s  type-definition  mechanism.  These 
more  complex  services  can  and  do  interoperate, 
but  it  takes  more  work. 

“You  have  to  think  about  who  is  consuming  your 
Web  service,”  says  Jon  Rauschenberger,  director  of 
technology  at  Clarity  Consulting  Inc.  in  Chicago. 
As  a  result,  the  capability  is  most  useful  today  for 
integration  behind  the  firewall. 

Rodolfo  Soto,  vice  president  of  operations  at  Ar- 
boles  Technology  in  San  Jose,  Costa  Rica,  agrees. 
“Web  services  are  very  valuable  for  enterprise  ap¬ 
plication  integration,  but  the  commercial  business 
rationale  is  still  unclear,”  he  says.  I 


Udell  Chttp://udell.roninhouse.comJ  is 
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IntelliSense  reveals 
its  methods  and 
properties. 
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Select  a  method;  IntelliSense 
reveals  its  return  type  and  the 
types  of  its  parameters. 


1  Create  a  Web 
reference  by 
way  of  a  WSDL 
file  at  4s4c.com. 


2  Create  an 
instance  of 
the  service. 


3  Type  a  period 
after  the 
variable’s  name. 


What’s  Not 
To  Like  About 
Visual  Studio? 


PROBLEM  AREAS 


Early  adopters  say  the  Visual  Studio 
.Net  learning  curve  is  steep.  That’s 
true  for  a  number  of  reasons.  Visual 
Basic  6  developers  encounter  language  shock  when  confront¬ 
ed  with  the  very  different  Visual  Basic  .Net.  Then  there’s  the 
challenge  of  mastering  the  class-rich  .Net  Framework.  While 
comparable  to  learning  any  large  object-oriented  system  -  say, 
SmallTalk  or  Java  -  Clarity  Consulting  Inc.'s  director  of  technol¬ 
ogy,  Jon  Rauschenberger,  points  out  that  "companies  who 
committed  to  the  Microsoft  platform  weren’t  expecting  this.” 

He  adds  that  Visual  Studio  .Net  itself  is  plainly  a  1.0  product  and 
cites  issues  like  sluggishness,  the  loss  of  edit-and-continue  ca¬ 
pability  and  “lack  of  robustness  in  the  immediate  window.” 

There's  some  concern  that  things  that  Visual  Studio  .Net 
makes  extremely  easy  for  programmers  will,  in  turn,  make  life 
harder  for  system  and  database  administrators.  Arboles  Tech¬ 
nology’s  vice  president  of  operations,  Rodolfo  Soto,  for  exam¬ 
ple,  cites  complaints  from  database  administrators  that  Active 
Data  Object  (ADO)  .Net’s  ability  to  create  and  exchange  dis¬ 
connected  data  sets  will  weaken  their  ability  to  enforce  con¬ 
straints  and  relationships.  Rauschenberger  notes  that  ASP 
.Net’s  server-side  events,  if  used  indiscriminately,  can  produce 
excessively  chatty  (and  thus  bandwidth-hungry)  applications. 
But  nobody  sees  these  issues  as  showstoppers. 

Although  some  early  adopters  have  deployed  systems  on 
the  .Net  platform,  most  business  will  move  more  slowly.  The 
new  platform  assists  gradual  migration  in  two  basic  ways. 

First,  although  .Net  doesn't  use  the  Component  Object  Mod¬ 
el  (COM)  technology  that  has  been  the  mainstay  of  Microsoft's 
component  strategy,  it  interoperates  smoothly  with  it.  The  .Net 
Framework  can  use  existing  COM  components.  And,  what’s 
more,  native  .Net  components  -  which  are  much  simpler  to  cre¬ 
ate  and  deploy  than  COM  components  -  can  plug  into  legacy 
COM-oriented  services  like  the  C0M+  transaction  manager. 

Second,  the  pervasive  support  for  Web  services  delivers  an¬ 
other  rich  set  of  integration  points  with  pre-.Net  software.  So  if 
it  ain’t  broke,  don't  fix  it.  But  when  you  start  something  new, 
these  experts  say,  think  about  doing  it  the  .Net  way. 


PROS  AND  CONS 

Reasons  to  like  .Net; 

■  Powerful  integrated  drive  electronics 

■  Major  steps  forward  in  ADO  .Net  and  ASP  .Net 

■  XML  productivity  without  deep  XML  skills 

■  Cross-language  development  that  can  yield 
real  benefits 

■  Superb  Web  services  support 

Reasons  to  fear  .Net: 

■  Steep  learning  curve 

■  Very  difficult  for  non-object-oriented 
programmers 

■  Hard  to  decide  whether,  or  how,  to  migrate 
legacy  code 


Quick 

Link© 


For  additional  .Net  development  information, 
including  a  story  on  building  Web  services  using 
BizTalk  Server,  go  to  Computerworld's  Web  site: 

vwtrw.computerworld.com/q727760 
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Some  users  are 


deploying  wire¬ 
less  LANs,  but 
they’re  adding 
on  security.  By 
Matt  Hamblen 


SSLANs 

I Hi  manage] 

i0  this  stor 

Despite  Insecurity 
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ESPITE  WIDESPREAD  CONCERNS 

about  the  security  of  wireless  LAN 
(WLAN)  deployments,  some  IT 
managers  are  forging  ahead  with 
Wi-Fi  technology  to  increase  worker 
mobility  in  a  variety  of  commercial 
settings  and  to  avoid  expensive  in¬ 
stallations  of  wires. 

Months  of  negative  publicity  about  the  weak¬ 
nesses  of  Wi-Fi,  or  802.11b,  have  sharpened  the  se¬ 
curity  scrutiny  on  the  part  of  several  IT  managers 
who  already  had  deployments  of  802.11b-based  net¬ 
works  under  way,  they  report. 

Instead  of  ripping  out  the  wireless  networks  or 
stopping  rollouts  altogether,  as  some  federal  labo¬ 
ratories  and  agencies  have  done  [News,  Feb.  4],  IT 
managers  at  several  organizations  interviewed  for 
;  story  have  begun  testing  devices  equipped 
with  new  open-standard  security  sys¬ 
tems  or  deploying  proprietary  security 
software.  Others  have  even  enlisted 
their  own  IT  staffs  to  try  to  sniff  the 
wireless  networks  and  find  potential 
entry  points. 

These  organizations  range  from  man¬ 
ufacturers  to  hospitals  to  a  university  to 
a  package  shipper  to  a  resort.  Although  they 
aren’t  trading  data  as  sensitive  as  national  securi¬ 
ty  secrets,  they  all  regard  their  wireless  networks 
as  needing  high  levels  of  security  to  keep  their 
operations  running  smoothly  and  to  protect  pa¬ 
tient  records,  credit  card  numbers  or  company 
information. 

“Every  time  there  is  another  wireless  security 
story,  everybody  here  gets  a  little  uneasy”  about 
using  802.11b,  says  Murshid  Khan,  director  of 
telecommunications  and  IT  operations  at  Walt 
Disney  Parks  &  Resorts  in  Lake  Buena  Vista,  Fla. 

Disney  has  been  running  wireless  LANs  for 
more  than  a  year  and  has  had  as  many  as  150  wire¬ 
less  access  points  installed,  mostly  to  enable 
point-of-sale  functions  where  credit  card  autho¬ 
rization  is  needed  for  sales  of  food  and  goods. 

Continued  on  page  48 
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You  can’t  have  too  much  of  a  good  thing.  Unless  you’re  talking 
Web  transactions — and  your  network  can’t  handle  the  load. 
After  Nabiscoworld.com  launched,  the  site  managers  faced 
exactly  this  issue:  too  many  visitors  were  arriving  at  the  site. 
Which  meant  too  many  people  were  turned  away.  Unhappy. 
AT&T  solved  the  problem.  We  re-architected  the  site  to  handle 
double  the  current  monthly  visits.  And  we  added  performance 
tracking  and  data-capture  tools  to  squeeze  out  more  usable 


information.  Result:  Nabiscoworld.com  receives  90%  more  visits. 
With  no  change  in  response  time.  And  at  greatly  reduced  cost. 
It’s  proof  that  the  right  investment  in  your  communications  not 
only  solves  problems.  It  brings  an  immediate  return.  A  return 
AT&T  helps  you  realize. 

Got  a  traffic  problem?  AT&T  can  help  you  solve  it. 

Results:  Measurable.  Possibilities:  Boundless. 


Call  AT&T  toll  free  at  I  866  346-9384  or  visit  us  at  www.attbusiness.com/return 


AT&T 


©2001  AT&T 
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IT  ROLLS  OUT 
W  RELESS  LANs 

Despite  Insecurity 

Continued  from  page  46 

After  using  128-bit  encryption  on  a  Wi-Fi  network 
last  year,  Disney  upgraded  in  January  to  dynamic  en¬ 
cryption,  which  can  use  key  lengths  of  128, 192  or  256 
bits,  over  a  virtual  private  network  (VPN).  Disney 
employees  randomly  try  to  sniff  the  network,  and  a 
third  party  has  been  hired  to  see  if  the  network  can 
be  hacked.  “That  [dynamic  128-bit]  key  has  not  been 
broken  yet,”  says  Khan. 

“There  are  always  worries  with  any  wireless  net¬ 
work,”  he  notes,  but  despite  that,  Wi-Fi  “gives  us 
business  advantages  and  is  a  convenience  for  custo¬ 
mers,  who  can  go  anywhere  and  use  a  credit  card.” 

Analyst  John  Pescatore  at  Gartner  Inc.  in  Stamford, 
Conn.,  says  concern  over  Wi-Fi  security  within  en¬ 
terprises  seems  to  have  peaked  late  last  year,  after 
security  experts  at  several  universities  reported 
problems  with  Wired  Equivalent  Privacy  (WEP) 
and  when  companies  jumped  to  heightened  alert 
following  the  Sept.  11  attacks. 

“Last  fall,  companies  set  out  to  think  things 
through  again,”  Pescatore  says.  But  somewhat  sur¬ 
prisingly,  Wi-Fi  is  still  being  deployed  to  avoid  in¬ 
stalling  more  wires  in  a  LAN  and  to  give  workers 
greater  mobility  and  flexibility. 

“I  haven’t  seen  a  slowdown  in  interest  by  our  cli¬ 
ents,”  Pescatore  says. 

Wireless  on  the  Move 

Several  years  ago,  United  Parcel  Service  Inc.  in  At¬ 
lanta  embarked  on  a  massive  project  to  put  200,000 
terminals  on  Bluetooth  and  Wi-Fi  networks.  Last 
year’s  Wi-Fi  security  worries  have  slowed  deploy¬ 
ment  in  UPS’s  corporate  offices,  where  data  is  con¬ 
sidered  sensitive,  but  not  for  warehouse  or  sorting 
operations,  says  David  Salzman,  program  manager. 
“The  data  on  our  mission-critical  WLANs  isn’t  sensi¬ 
tive  enough  to  warrant  a  major  [security]  concern, 
compared  to  the  benefits,”  he  says. 

Auto  manufacturers  have  long  used  wireless  net¬ 
works  in  various  settings,  including  on  the  factory 
floor.  The  major  automakers  started  installing  wire¬ 
less  links  in  the  mid-1990s,  using  proprietary  meth¬ 
ods  until  the  802.11b  standard  was  unveiled. 

General  Motors  Corp.  has  deployed  wireless  links 
around  the  world.  Using  wires  for  the  same  net¬ 
works  would  have  left  important  assembly  lines  vul¬ 
nerable  to  hours  of  downtime,  says  Arvind  Sabhar- 
wal,  director  of  telecommunications  and  networks. 
In  addition,  the  wireless  networks  give  workers 
greater  mobility. 

Despite  the  contained  nature  of  plants,  whose 
perimeter  fences  and  locked  entry  areas  might  seem 
to  make  them  immune  to  sniffing  by  nearby  hackers, 
GM  “doesn’t  consider  the  lines  a  low-security  area,” 


partly  because  the  WLANs  run  in  proximity  to  some 
office  networks,  he  says. 

To  address  what  Sabharwal  calls  the  Achilles’  heel 
of  WLANs,  GM  has  resorted  to  a  range  of  approach¬ 
es,  including  turning  on  WEP  for  access  devices  that 
normally  default  to  Off,  and  testing  newer  security 
methods,  including  WEP2  and  802.11i,  which  might 
not  roll  out  in  products  widely  until  early  2003,  ac¬ 
cording  to  analysts. 

GM  also  segments  its  networks  with  firewalls  and 
VPNs  and  relies  heavily  on  detailed  site  surveys  that 
look  at  all  radio  interference  sources,  including  cord¬ 
less  phones.  “Even  with  security  software,  you  can 
survey  the  bleed  of  [radio]  signals  outside  the  facility 
to  make  sure  it’s  minimized,”  Sabharwal  says. 

GM’s  biggest  strategic  weapon  may  be  its  involve¬ 
ment  with  standards  bodies  and  vendors  to  see  that 
standardized  security  methods  are  quickly  incorpo¬ 
rated  into  wireless  gear  —  an  important  considera¬ 
tion  for  a  global  manufacturer  that  uses  Wi-Fi  equip¬ 
ment  from  several  makers.  “Because  of  our  size  and 
clout,  we  are  making  sure  some  of  our  partners  and 
vendors  are  adopting  standards  quicker  in  the  securi¬ 
ty  area,”  Sabharwal  says. 

BMW  AG  in  Munich,  Germany,  also  uses  802.11b 
on  the  factory  floor  and  has  relied  heavi¬ 
ly  on  site  surveys  to  prevent  access 
points  from  bleeding  to  nearby  buildings 
or  parking  areas,  says  Daniel  Lange,  di¬ 
rector  of  IT  strategy. 

Lange  says  that  since  the  first  of  the 
year,  BMW  has  discovered  no  additional 
security  holes  in  802.11b,  although  there 
have  been  more  articles  describing  its 
deficiencies,  in  addition  to  a  broader  dis¬ 
cussion  of  its  flaws.  Lange  says  he  hopes 
the  Institute  of  Electrical  and  Electronic 
Engineers  Inc.’s  recently  approved  stan¬ 
dards  will  be  quickly  certified  and  widely 
deployed. 

BMW  does  a  lot  to  keep  security  high, 
including  sending  an  IT  inspector  into 
the  homes  of  BMW  workers  to  see  how 
they  use  home-based  wireless  LANs  for  work,  a  key 
point  of  vulnerability,  according  to  analysts.  Lange 
agrees  with  analysts  and  vendors  that  using  a  VPN 
on  a  Wi-Fi  network  is  sufficient  to  keep  a  third  party 
from  reading  wireless  communications.  But  he  sees 
other  related  security  problems. 

When  Lange  was  asked  at  a  forum  last  November 
if  BMW  has  been  hacked  over  802.11b,  he  responded, 
“Not  that  we’re  aware  of.”  But,  he  quickly  added, 
there’s  a  far  greater  security  vulnerability  if  “a  beau¬ 
tiful  young  woman  entices  a  young  man  in  IT  to  di¬ 
vulge  a  network  password.” 

And  Lange  says  he’s  just  as  worried  about  a  sabo¬ 
teur  somehow  entering  a  BMW  plant  and  throwing  a 
small  $50  radio-jamming  device  under  a  cabinet,  ren¬ 
dering  the  wireless  access  points  on  the  2.4-GHz  net¬ 
work  useless.  It  might  take  hours  of  downtime  to 
find  such  a  device,  he  says. 

Hospitals  could  face  large  security  risks  with 
WLANs,  analysts  say,  because  they  receive  frequent 
visitors  and  contain  sensitive  patient  data.  North 
Shore-Long  Island  Jewish  Health  System  in  Great 
Neck,  N.Y.,  which  has  18  hospitals,  is  about  to  imple¬ 
ment  a  Wi-Fi  system  in  its  Manhasset  hospital. 


“The  publicity  about  Wi-Fi  problems  has  certainly 
made  us  more  skeptical  about  how  we  do  our  imple¬ 
mentation,”  says  North  Shore  CIO  Patrick  Carney. 

“We  haven’t  stopped,  but  we’re  more  skeptical.” 

By  summer,  the  Manhasset  hospital  hopes  to  have 
implemented  an  order  entry  system  that  will  allow  a 
doctor  to  prescribe  drugs  through  a  laptop  that’s 
wirelessly  connected  to  a  server.  Hospital  officials 
expect  that  the  benefits  of  the  system,  which  will 
check  and  verify  with  the  doctor  the  proper  use  and 
dosage  of  medications,  will  outweigh  wireless  secur¬ 
ity  concerns. 

Carney  says  his  most  immediate  worry  is  that  a 
hacker  could  find  out  when  celebrities  are  checked 
in  at  the  hospital  for  drug  rehabilitation  or  plastic 
surgery.  But  whatever  gear  the  hospital  chooses,  he 
expects  it  to  involve  data  encryption.  “We’re  more 
sensitive  because  Wi-Fi  has  been  too  easy  to  pene¬ 
trate,”  he  says. 

Tampa  General  Hospital  in  Tampa,  Fla.,  has  a  wire¬ 
less  connection  between  the  hospital  and  its  radiology 
clinics  across  Tampa  Bay.  The  link  was  the  least  ex¬ 
pensive  of  several  alternatives  and  has  been  great  for 
physicians,  who  get  quick  connections  to  vital  patient 
data,  says  Joe  Gandiosi,  manager  of  network  services. 

That  link  is  secured  with  Wireless  Link 
Layer  Security  and  Triple  Data  Encryp¬ 
tion  Standard  technology  from  Fortress 
Technologies  Inc.  in  Oldsmar,  Fla. 

Lessons  Learned  in  School 

Many  universities  are  enthusiastically 
turning  to  Wi-Fi,  including  Buena  Vista 
University  (BVU)  in  Storm  Lake,  Iowa, 
where  145  Wi-Fi  access  points  are  in¬ 
stalled  across  the  1,400-student  campus. 

The  rollout  in  mid-2000  was  originally 
secured  with  40-bit  WEP  encryption,  but 
security  has  been  enhanced  with  WEP- 
plus  technology  provided  by  Avaya  Inc.  in 
Basking  Ridge,  N.J.,  said  Ken  Clipperton, 
managing  director  of  information  systems. 

To  lessen  the  chances  of  student  hack¬ 
ers  changing  their  grades  or  reducing  their  tuition 
bills,  BVU  has  kept  its  registrar  and  business  offices 
on  the  wired  Ethernet  LAN.  BVU  will  eventually  up¬ 
grade  to  more  secure  protocols  such  as  802.11a  but  so 
far  hasn’t  installed  firewalls  behind  the  wireless  ac¬ 
cess  points  as  some  analysts  recommend. 

“We  have,  in  general,  the  sense  of  security  here,” 
Clipperton  says,  noting  that  the  wireless  network 
cost  less  than  $400,000,  about  one-third  of  the  cost 
of  wiring  classrooms  and  other  buildings. 

Boingo  Wireless  Inc.  in  Santa  Monica,  Calif., 
boasts  that  it  has  500  “hot-spot”  Wi-Fi  WLANs  ready 
to  serve  the  public  in  hotels  and  airports  nationwide. 

Users  can  download  free  Boingo  sniffer  software  that 
lets  them  find  Wi-Fi  networks.  The  cost  is  up  to  $75 
per  month  for  unlimited  service.  An  additional  $30 
provides  a  personal  VPN  for  users. 

Although  the  company  can’t  be  sure  if  concerns 
over  Wi-Fi  security  have  cut  into  sales  of  its  service, 

Boingo  decided  to  provide  the  personal  VPN  if  a  cus¬ 
tomer’s  company  doesn’t  have  one,  because  “we 
knew  customers  needed  a  solution  to  overcome  the  5j 

widely  publicized  shortcomings  of  Wi-Fi,”  says  Chris¬ 
tian  Gunning,  director  of  product  management.  ► 


WHAT  IS  IT? 


Wi-Fi,  or 
802.11b 

Wi-Fi  is  the  trade- 
marked  name  given  by 

the  Wireless  Ethernet 
Compliance  Alliance 

to  wireless  networks 
operating  with  the 

IEEE  802.11b  standard, 

which  permits  through¬ 
put  up  to  11M  bit/sec. 
over  a  range  of  about 
100  meters. 
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Wireless  LANs 


DEFINITION 

Wireless  local-area  networks  (WLAN)  use  radio  waves 
instead  of  a  cable  to  connect  a  user  device,  such 
as  a  laptop  computer,  to  a  LAN.  They  provide 
Ethernet  connections  over  the  air  and  operate 
under  the  802.11  family  of  specifications  devel¬ 
oped  by  the  Institute  of  Electrical  and  Electronics 
Engineers  Inc. 


BV  BOB  BREWIN 

ONNECTING  a 
computer  to  a 
wireless  network 
has  never  been 
easier,  and  the 
most  common  standard  for 
wireless  networking,  the  Insti¬ 
tute  of  Electrical  and  Electron¬ 
ics  Engineers  Inc.’s  802.11b,  of¬ 
fers  11M  bit/sec.  connectivity 
—  a  data  rate  equal  to  that  of 
wired  Ethernet  LANs. 

A  range  of  products  that 
comply  with  Wi-Fi,  which  is 
what  the  140-member  Wire¬ 
less  Ethernet  Compatibility 
Alliance  in  Mountain  View, 
Calif.,  calls  802.11b,  are  now 
readily  available. 

You  can  create  a  wireless 
network  with  just  two  com¬ 
puters,  each  equipped  with  a 
Wi-Fi  card,  in  what’s  called  an 
ad  hoc  configuration.  For 
more  computers,  you’ll  likely 
need  to  get  a  wireless  access 
point  —  a  radio  receiver/ 
transmitter  and  antenna  that 
hooks  up  to  a  wired  network, 
router  or  hub.  This  is  called  an 
infrastructure  configuration. 
Access  points  are  available  in 
many  different  forms,  some 
combined  with  cable  or  Digital 
Subscriber  Line  modems, 
routers  and  firewalls. 

Wi-Fi  is  rapidly  becoming  a 
standard  feature  in  new  note¬ 
book  computers.  Wireless  In¬ 
ternet  connections  are  avail¬ 
able  in  a  number  of  public 
spaces,  including  airports, 
hotels  and  coffee  shops.  Com¬ 
petition  has  driven  down  the 
cost  of  wireless  LAN  (WLAN) 
gear;  an  access  point  and 
one  PC  card  can  cost  less 
than  $300. 

Access  points  can  be 
mounted  indoors  in  office 
ceilings.  They  can  be  mounted 
outdoors  on  poles,  masts  or 
existing  towers  in  weatherized 
shelters.  Device  antennas  are 
either  built  into  cases  or,  if 
they  use  a  card,  sport  a  knob¬ 
by  antenna  up  to  1  in.  long 


sticking  out  from  the  card. 
WLANs  support  raw  data 
throughput  of  2M  to  54M 
bit/sec.  They  have  a  range  of 
several  hundred  feet,  although 
some  systems  can  cover  a  mile 
radius  outdoors  with  tower- 
mounted  antennas. 

A  WLAN’s  range  can  be  ex¬ 
tended  by  adding  access 
points,  with  users  roaming 
among  them  as  they  do  in  a 
cellular  system.  Air  France 
Groupe  has  installed  160  out¬ 


door  access  points  at  its 
Charles  de  Gaulle  Internation¬ 
al  Airport  hub  in  Paris  to  sup¬ 
port  bag-matching  operations. 

Price  drops  in  WLAN  hard¬ 
ware,  plus  the  labor  costs  of 
installing  wired  LAN  cabling, 
have  made  the  costs  of  wired 
and  wireless  LANs  roughly 
comparable.  WLANs  win  the 
race  against  their  wired 
cousins  on  convenience  —  add 
an  access  point  to  a  network, 
and  you  can  serve  a  whole 


new  area  of  a  building  and 
multiple  users  in  a  few  hours. 

The  proliferation  of  WLANs 
has  also  led  to  the  develop¬ 
ment  of  an  “always-connect¬ 
ed”  culture,  in  which  a  grow¬ 
ing  number  of  users  expect  to 
be  able  to  access  information 
wherever  they’re  in  an  office. 

The  unwired  conference 
room  has  been  replaced  with 
the  WLAN  conference  room 
or  auditorium  with  some  un¬ 
settling  results:  If  you’re  mak¬ 
ing  a  presentation,  it  had  bet¬ 
ter  be  good,  or  you  might  see 
bored  listeners  checking  their 
e-mail. 

Frequency  Hopper 

WLANs  operate  in  portions 
of  the  frequency  spectrum  al¬ 
lotted  by  the  Federal  Commu¬ 
nications  Commission  for  un¬ 
licensed  use.  Anyone  can  op¬ 
erate  a  wide  variety  of  devices 
in  those  bands  without  spend¬ 
ing  billions  of  dollars  for  a  fed¬ 
eral  license. 

The  lack  of  federal  regula¬ 
tion  means  that  as  the  un¬ 
licensed  bands  get  more 
crowded,  the  possibility  of  in¬ 
terference  from  nearby  sys¬ 
tems  increases. 

For  example,  microwave 
ovens  operate  in  the  2.4-GHz 
frequency  band  used  today  by 
Wi-Fi  LANs.  Users  need  to 
know  that  they  stand  a  remote 
chance  of  having  their  data 
stream  knocked  out  if  some¬ 
one  makes  popcorn  in  the  of- 


Wireless  Networking  Spectrum 

The  FCC  allows  unlicensed  and  unregulated  operation  of  a  wide 
variety  of  communications  devices  in  two  spectrum  bands.  One 
of  those  bands,  the  Unlicensed  National  Information  Infrastruc¬ 
ture  (U-NII),  offers  more  than  twice  the  spectrum  (300  MHz) 
than  the  agency  sold  at  auction  for  the  cellular  communications 
bands  used  by  companies  such  as  Sprint  PCS  Group. 


BAND  NAME 

APPROVED 
BY  FCC 

FREQUENCY 

APPLICATIONS 

ISM  BANDS 

1985 

902-928  MHz 

Fixed  wireless  systems 
used  by  ISPs  and  for  intra¬ 
building  connectivity,  cord¬ 
less  phones  and  in-house 
transmitters  for  stereo, 
computer  and  TV  audio 

2.4-2.4835  GHz 

Fixed  wireless  systems, 
WLANs,  microwaves  and 
cordless  phones 

5.725-5.850  GHz 

Fixed  wireless  systems  and 
WLANs 

U-NII  BANDS 

1997 

5.15-5.35  GHz 

WLANs 

■  . 

5.725-5.825  GHz 
(partially  overlaps 
ISM  band) 

WLANs 

H  A  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 


fice  microwave. 

The  FCC  first  opened  the 
spectrum  to  unlicensed  use  in 
1985  with  a  rule  allowing  “in¬ 
tentional  radiators”  such  as 
LANs  to  operate  in  industrial, 
scientific  and  medical  (ISM) 
bands.  These  bands  are  used 
by  devices  such  as  medical 
diathermy  equipment  or  ultra¬ 
sonic  jewelry  cleaners,  which 
spray  noise  around  those  fre¬ 
quencies  as  they  operate. 

The  ISM  bands  include 
three  frequency  ranges  (see 
chart),  and  by  the  late  1980s,  a 
number  of  vendors  had  devel¬ 
oped  proprietary  WLAN  sys¬ 
tems  operating  in  the  2.4-  to 
2.4835-GHz  range  to  support 
vertical  applications,  such  as 
wireless  bar-code  scanners 
used  in  warehouse  or  retail 
applications. 

The  first  WLAN  standard 
for  the  2.4-GHz  band,  IEEE 
802.11,  used  spread-spectrum 
radio  techniques  originally  de¬ 
veloped  and  patented  in  1942 
by  movie  star  Hedy  Lamarr 
and  composer  George  Antheil. 
The  first  802.11  standard  al¬ 
lowed  vendors  to  use  either 
Frequency  Hopping  Spread 
Spectrum  (FHSS)  or  Direct 
Sequence  Spread  Spectrum 
(DSSS). 

FHSS  “hops”  among  the  79 
1-MHz-wide  channels  of  the 
2.4-GHz  band,  while  DSSS 
spreads  its  signals  across  the 
band,  with  three  22-MHz-wide 
DSSS  channels  available. 

Though  vendors  of  FHSS, 
such  as  Alvarion  Ltd.  in  Tel 
Aviv  and  Symbol  Technolo¬ 
gies  Inc.  in  Holtsville,  N.Y., 
tout  it  as  being  harder  to  hack 
than  DSSS  because  of  the  hop¬ 
ping  feature,  most  of  the 
WLAN  industry  now  relies  on 
the  DSSS  technique  in  the 
802.11b  standard.  I 
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luetooth  Adds  Bite 
To  I/O  Connections 


OUTLOOK:  The  wireless  I/O  personal- 
area  network  technology  could  ease 
some  desktop  support  headaches,  but 
its  acceptance  into  the  IT  infrastructure 
is  likely  to  be  slow.  BY  RUSSELL  KAY 


The  typical  desktop 
computer  may  have  a 
dozen  or  more  cables 
on  the  back.  Perhaps 
half  of  all  computer 
hardware  problems  are  caused 
by  these  cable  connections, 
which  may  include  power,  a 
mouse,  a  keyboard,  a  monitor,  a 
network,  a  printer,  a  serial  per¬ 
sonal  digital  assistant  cradle, 
Universal  Serial  Bus  devices,  a 
modem,  speakers  and  perhaps 
a  SCSI  peripheral  such  as  a 
scanner.  If  IT  could  get  rid  of 
those  cables,  technical  support 
costs  might  drop  considerably. 

One  way  out  of  this  situation 
may  be  through  Bluetooth,  a 
wireless  technology  that  can 
tie  together  PCs  and  I/O  de¬ 
vices  to  establish  what’s  called 
a  personal-area  network. 
Named  after  an  11th  century 
Danish  king,  Bluetooth  uses  a 
frequency-hopping  protocol 
that  automatically  finds  and 
identifies  other  Bluetooth  de¬ 
vices  within  range  [Quick- 
Study,  June  12,  2000].  After 
having  been  in  development 
for  some  five  years,  Bluetooth 
is  just  now  becoming  commer¬ 
cially  available,  built  into  prod¬ 
ucts  and  sold  as  add-on  cards 
and  adapters. 

Bluetooth  can  do  more  than 
replace  cables  on  the  desktop. 
It  offers  the  promise  of  sim¬ 
pler  printing,  synchronization 
and  integration  with  handheld 
devices.  Printing  from  your 

(  ^1  lic'l/'  What  do  you  need 
V  J  Ll  ILK  to  know  before  buy- 
I  -|Y-»|  ing  a  Bluetooth  de- 

>  vice?  What’s  behind 

Bluetooth's  projected  sales  growth? 
find  the  answers  on  our  Web  site: 
computerworld.com/q?2//// 


phone,  for  example,  isn’t 
something  most  users  have 
thought  about  doing  before. 

What  sets  Bluetooth  apart 
from  other  wireless  technol¬ 
ogies,  such  as  those  in  the 
802.11x  wireless  Ethernet  (Wi¬ 
Fi)  family,  is  its  range  of  less 
than  10  meters,  its  low  power 
consumption  and  its  cost. 

Today,  Bluetooth-enabled 
devices  sell  at  a  premium. 
Manufacturers  say  they  will 
eventually  bring  the  cost  of 
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Bluetooth  chips  down  to  about 
$5  each,  at  which  point  periph¬ 
eral  vendors  are  likely  to  em¬ 
bed  the  chips  in  most  comput¬ 
er  and  communications  de¬ 
vices.  But  that’s  probably  sev¬ 
eral  years  off,  analysts  say. 

Technical  Challenges 

There  are  two  clouds  on 
Bluetooth’s  horizon.  One  con¬ 
cerns  how  well  it  can  coexist 
with  Wi-Fi,  which  suffers  from 
a  small,  but  not  fatal,  amount 
of  interference  between  802.11 
and  Bluetooth  devices. 

The  second  involves  securi¬ 
ty:  Bluetooth  does  support  en¬ 
crypted  communications,  but 
the  initial  development  has 
been  skewed  toward  conve¬ 
nience.  This  may  not  be  a  ma- 


Bluetooth  vs.  Wi-Fi 


WIRELESS  TECHNOLOGY 

BLUETOOTH 

802.11B  (WI-FI) 

RANGE 

Up  to  10  meters 

Up  to  100  meters 

MAXIMUM  THROUGHPUT 

1M  bit/sec. 

11M  bit/sec. 

TESTED  PERFORMANCE 

Not  available 

107.5  feet  at 

11M  bit/sec.;  225  feet 
at  2M  bit/sec. 

PRIMARY  APPLICATION 

Cable  replacement: 
personal-area 
networks:  handheld 
device  connectivity 

Corporate  and 
home  IP  LANs 

SOURCE  ATHEROS  COMMUNICATIONS  INC..  SUNNYVALE.  CALIF 


jor  issue  for  printer  connec¬ 
tions,  but  it  will  be  when  com¬ 
municating  with  automated 
teller  machines  or  factory- 
floor  equipment. 

Bluetooth’s  short  range 
doesn’t  provide  enough  com¬ 
munications  protection.  Like 
Wi-Fi,  Bluetooth  will  need 
stronger  security  mechanisms. 

“Security  is  a  concern  for 
us,”  both  for  Bluetooth  and 
802.11,  says  Albert  Hui,  man¬ 
ager  of  technical  services  at 
Smead  Manufacturing  Co.  in 
Hastings,  Minn.  Today,  “scan¬ 
ners  and  handheld  devices  are 
not  capable  of  identifying 
themselves  by  using  [public- 
key  infrastructure]  or  certifi¬ 
cation  authentication,”  he  says. 

Rachna  Ahlawat,  an  analyst 
at  Dataquest  Inc.  in  San  Jose, 
says  that  while  major  vendors 
such  as  Cisco  Systems  Inc.  are 
focusing  on  802.11b  security, 
most  Bluetooth  development 
has  been  left  to  smaller  compa¬ 
nies.  Also,  she  says,  the  indus¬ 
try  is  “treating  Bluetooth  as  es¬ 
sentially  unencrypted  in  criti¬ 
cal  applications,  so  enterprise 
IT  just  doesn’t  trust  Bluetooth.” 

Ahlawat  says  that  right  now, 
large  companies  are  much 
more  interested  in  the  longer- 
range,  more  versatile  and  more 
secure  802.11b  technology. 
Bluetooth  does  make  device 
I/O  interconnections  less 
problematic,  and  it  may  even¬ 
tually  permeate  the  enterprise 
as  new  equipment  includes  the 
interface  by  default.  But  delib¬ 
erate  enterprise  deployments 
are  unlikely  anytime  soon. 

“Bluetooth  is  something  I 
might  use  to  talk  to  my  print¬ 
er,”  says  Ahlawat,  “but  not  for 
anything  else.”  I 


THE  MARKET 


Looking  for  a  Few  Good  Users 


Vendors  have  introduced  very  few 
Bluetooth  devices  in  the  past  year, 
and  only  in  the  past  few  months 
have  Bluetooth-enabled  products 
become  readily  available.  Initial 
releases  are  selling  mainly  to 
advanced  end  users  and  mobile 
workers,  but  not  to  enterprise  IT 
departments. 

Computerworld  contacted  sever¬ 
al  makers  of  available  Bluetooth 


gear,  and  not  one  could  point  to  an 
enterprise  customer.  This  pattern  is 
reminiscent  of  that  of  the  PalmPilot 
and  its  progeny.  The  devices  were 
inexpensive  enough  for  individuals 
to  buy  and  bring  into  the  enterprise, 
generally  without  the  blessing  or 
support  of  IT.  But  now  enterprise  IT 
has  a  big  stake  in  supporting  such 
handheld  devices.  Bluetooth  may 
follow  a  similar  path. 


Another  reason  for  slow  adop¬ 
tion:  The  first  Bluetooth  products  to 
market  are  quite  expensive  for  what 
they  do,  as  is  usually  the  case  for  a 
newly  emergent  technology. 

Eventually,  Bluetooth  chips  will 
be  cheap  enough  to  be  built  into 
computers  and  peripherals  at  a 
price  that's  competitive  with  non- 
Bluetooth  hardware.  For  now, 
though,  each  user  will  need  a  $150 
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■  PRODUCT  PIPELINE 

What’s 

Available 

The  Bluetooth  Web  site 
( vmw.bluetooth.com) 
lists  more  than  500 
tested  and  approved 
Bluetooth-enabled  prod¬ 
ucts.  Many  of  those 
products  are  component- 
level  and  are  from  origi¬ 
nal  equipment  manufac¬ 
turers.  The  end-user 
product  categories  and 
the  players  within  each 
include  the  following: 

PC  CARD  ADAPTERS 

3Com  Corp.,  Motorola 
Inc.,  Toshiba  America 
Information  Systems  Inc. 

USB  ADAPTERS 

3Com  Corp. 

LAPTOPS  WITH 
BUILT-IN  BLUETOOTH 

IBM,  Compaq  Computer 
Corp.,  Toshiba,  Hewlett- 
Packard,  Dell  Computer 
Corp. 

PRINTERS 

Hewlett-Packard 

PDAs 

Compaq 

COMPACT  FLASH 
CARD  ADAPTERS 

Socket  Communica¬ 
tions  Inc. 

TELEPHONES  AND 
HEADSETS 

LM  Ericsson  Telephone 
Co.,  Nokia  Corp. 


Bluetooth  add-on  card  or  adapter. 
Then  there’s  the  peripheral  costs. 

Hewlett-Packard  Co.’s  DeskJet 
995  Bluetooth-equipped  printer, 
for  example,  commands  a  $100 
premium  over  the  $299  nonwire- 
less  990cse.  In  contrast,  a  high- 
quality  printer  cable,  which  Blue¬ 
tooth  replaces,  can  be  had  for 
about  $20. 

-Russell  Kay 
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WHAT’S  THE  LATEST  SCOOP  ON 

INTEGRATION? 


Free  Webcast  reveals  what 
the  infrastructure  experts  are  saying. 
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linking  your  internal  hardware  and  software  with  that 
vast  network  of  suppliers,  customers  and  business 
partners  out  there? 

Then  what  you  should  do  next  is  hardly  a 
puzzle.  Sign  up  for  a  series  of  Webcasts  on  e-business 
infrastructure.  The  Webcasts  are  absolutely  free  when 
you  register  by  phone  or  online.  Each  is  thirty  minutes 
long  and  sponsored  by  IBM  and  ITworld.com.  In  the 


first  one,  you’ll  hear  expert  discussion  on  the  major 
integration  challenges  you  face,  including  perhaps 
the  biggest  of  all  challenges  — maximizing  your  ROI. 
And  these  Webcasts  aren't  just  theory,  either.  Because 
each  will  conclude  with  thorough  recommendations 
that  will  help  you  both  develop  a  successful  corporate 
strategy  and  point  you  to  a  full  range  of  resources  for 
additional  information. 

So  register  now  for  our  free  online  Integration 
Webcast.  And  get  yourself  the  latest  — absolutely  the 
very  latest— on  integration. 


CLICK  OR  CALL  FOR  A  FREE  WEBCAST. 


(go;  ibm.com/e-business/scoop  Q)  1800  IBM  7080,  ask  for  Scoop 
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Management  Software 

Hits  Integration  Snag 

A  new  tool  promises  to  simplify  security  device 

management ,  but  implementation  is  no  small  task 


BY  MATHIAS  THURMAN 

ECURITY  MANAGERS  who  are 
responsible  for  managing  cor¬ 
porate  firewalls,  virtual  pri¬ 
vate  network  (VPN)  gate¬ 
ways,  routers  and  other  de¬ 
vices  will  understand  the  headaches 
I’m  facing  this  week. 

Prior  to  my  arrival  a  few  months 
back,  my  company  was 
primarily  a  Check  Point 
FireWall-1  shop.  However, 
the  company  recently  de¬ 
cided  to  switch  to  PIX 
firewalls  from  Cisco  Sys¬ 
tems  Inc. 

Personally,  I’m  a  big  ad¬ 
vocate  of  the  firewall 
products  from  Redwood 
City,  Calif.-based  Check 
Point  Software  Tech¬ 
nologies  Ltd.  There’s 
nothing  wrong  with  Cis¬ 
co’s  PIX  products,  but  I’ve 
found  myself  having  to 
climb  a  steep  learning 
curve  while  coping  with  a 
rule  base  that’s  becoming 
increasingly  unmanage¬ 
able.  And  I’m  trying  to  find  a  way  to 
centralize  management  of  security  de¬ 
vices  so  that  we  don’t  need  a  different 
tool  for  every  device. 

4,300  Reasons  for  Change 

There  are  two  methods  of  adminis¬ 
tering  a  PIX  firewall.  With  the  com¬ 
mand-line  interface  method,  you  can 
manually  enter  commands  from  a 
terminal  window  or  via  Telnet  or 
Secure  Shell  access. 

A  typical  set  of  commands  might 
look  like  the  following: 

access-list  DMZ  permit  tcp  host 

192.168.10.33  host  10.38.20.5  eq  smtp 

access-list  DMZ  permit  tcp  host 

1 82.168.10.34  host  10.38.20.5  eq  smtp 

access-list  DMZ  permit  tcp  host 

166 .168.10.35  host  10.38.20.5  eq  smtp 


In  this  case,  the  rules  tell  the  firewall 
that  on  the  demilitarized  zone  (DMZ) 
interface,  it  should  allow  hosts  in 
IP  address  ranges  192.168.10.33  to 
192.168.10.35  to  access  host  10.38.20.5 
and  send  e-mail  via  Simple  Mail  Trans¬ 
fer  Protocol  (SMTP). 

In  principle,  that’s  not  a  bad  way  to 
create  access  lists  and  manage  a  fire¬ 
wall.  But  at  my  company, 
the  main  corporate  firewall 
contains  more  than  4,300 
lines  of  rules,  and  the 
e-business  firewall  con¬ 
tains  more  than  5,000. 
Every  time  my  staff  makes 
a  change,  we  all  stand 
around  with  our  fingers 
crossed,  cringing,  hoping 
that  the  firewall  doesn’t 
crash.  I’ve  never  seen  so 
many  rules  on  a  single  fire¬ 
wall. 

To  cope  with  this,  we 
turned  to  the  other  method 
of  managing  a  PIX  firewall: 
using  tools  based  on  a 
graphical  user  interface. 
The  two  most  commonly 
used  PIX  firewall  tools  are  the  Cisco 
Secure  Policy  Manager  (CSPM)  and 
the  company’s  Web-based  PIX  Device 
Manager.  We  chose  CSPM.  But  I  dis¬ 
covered  that  it  can  be  complex  to  man¬ 
age,  especially  if  you  didn’t  contribute 
to  its  initial  configuration. 

As  if  that  wasn’t  enough  of  a  head¬ 
ache,  we  must  also  manage  access  con¬ 
trol  lists  on  our  routers  and  switches,  as 
well  as  the  rules  for  our  VPN  gateways. 
Each  product  type  requires  a  different 
tool  to  administer  its  configuration  — 
even  when  products  come  from  the 
same  vendor.  And  if  we  migrate  to  inex¬ 
pensive  Linux-based  firewalls  for  some 
applications,  as  planned,  we  will  have 
to  add  yet  another  management  tool. 

Even  if  we  wanted  to  manage  all 
these  security  resources  using  myriad 
management  tools,  we  couldn’t  afford 
it.  With  our  limited  budget,  we’ve  been 


looking  for  a  single  tool  to  manage  all 
of  our  security  devices. 

We  finally  settled  on  Solsoft  NP  from 
Mountain  View,  Calif. -based  Solsoft 
Inc.  This  centralized  tool  can  manage 
and  audit  security  access  lists  across  all 
of  our  routers,  switches,  firewalls  and 
VPN  gateways. 

The  Central  Issue 

Solsoft  NP  works  like  this:  First,  I  de¬ 
fine  all  of  my  network  resources  as  ob¬ 
jects.  For  example,  I  might  define  a  Lin¬ 
ux  server  running  Netfilter,  a  Cisco 
PIX  6.1  firewall  and  a  Cisco  VPN  con¬ 
centrator.  Once  I’ve  completed  that 
task  —  which,  by  the  way,  is  the  most 
time-consuming  part  of  the  process  — 
I  start  making  connections  from  one 
object  to  another. 

If  I  want  IP  addresses  192.168.10.33  to 
192.168.10.35  to  be  able  to  use  IP  address 
10.38.20.5  as  an  e-mail  gateway,  I  use 
the  mouse  to  select  the  SMTP  service 
object  and  drag  a  line  between  it  and 
the  IP  address  object,  establishing  the 
relationship.  Alternatively,  I  can  create 
what  Solsoft  calls  “metaclasses”  to  cre¬ 
ate  a  group  containing  a  range  of  IP  ad¬ 
dresses.  Solsoft  NP  then  treats  that 
group  as  a  single  object. 

The  same  goes  for  all  other  re¬ 
sources:  The  administrator  picks  the 
service  and  then  draws  out  the  rela¬ 
tionships.  Once  I’ve  completed  and 
compiled  the  rules,  Solsoft  NP  writes 
the  appropriate  code  for  each  device. 
Solsoft  NP  doesn’t  support  every  fire¬ 
wall,  router  or  VPN  product  on  the 
market,  but  it  does  support  many  popu¬ 
lar  ones. 

If  managing  with  Solsoft  NP  sounds 
easy,  deploying  it  in  our  environment 
was  anything  but.  There  was  no  simple 
way  to  convert  our  current  4,300  fire¬ 
wall  rules  into  a  format  that  would  al¬ 
low  Solsoft  NP  to  manage  them.  Nor 
would  the  product  recognize  our  cur¬ 
rent  rule  set.  We  needed  to  manipulate, 
massage  and  consolidate  the  PIX  con¬ 
figuration  into  a  format  Solsoft  NP 
could  use. 

I  couldn’t  find  a  tool  that  would  help 
us  automate  the  process  of  converting 
our  current  rule  set.  Someone  with 
good  Perl  programming  skills  probably 
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LINKS: 

www.solsoft.com:  Check  Solsoft's 
Web  site  for  details  on  devices  that  its 
Solsoft  NP  security  management  tool 
will  support. 

http://netfilter.samba.org :  Netfilter 
and  IPtables  are  free  Linux-based  fire¬ 
wall  applications  my  company  is  con¬ 
sidering  implementing. 

www.phoneboy.com:  If  you're  a 
Check  Point  firewall  fan,  this  is  proba¬ 
bly  the  best  resource  on  the  Internet  for 
administrators. 

www.  cisco,  com/ warp/public/ 
cc/pd/fw/sqfw500/index.shtml : 

Cisco’s  Web  site  offers  more  details 
on  the  PIX  firewall  management  tools 
I  mentioned. 


could  have  written  a  script  to  do  the 
work,  but  that  would  have  taken  me  a 
week  to  figure  out.  So  I  ended  up  ex¬ 
porting  the  PIX  firewall  rules  into  an 
Excel  spreadsheet  and  manually  going 
through  the  data. 

Along  the  way,  I  consolidated  the  old 
rules  into  metaclasses.  For  example,  if  I 
saw  that  250  of  the  PIX  rules  com¬ 
prised  50  individual  networks  all  con¬ 
figured  to  communicate  with  a  single 
IP  address  on  five  different  ports,  I 
created  two  metaclasses  —  one  con¬ 
sisting  of  the  50  networks  (net-group) 
and  the  other  containing  the  five 
ports/services  (svc-group).  This  al¬ 
lowed  me  to  easily  create  a  Solsoft  NP 
rule  by  drawing  a  line  between  the  ob¬ 
jects.  Solsoft  NP  would  then  generate 
the  appropriate  code  to  allow  the  net- 
group  to  communicate  with  the  single 
IP  address  on  the  five  ports/services  in 
the  svc-group. 

In  10  hours  of  work,  I  was  able  to 
consolidate  our  4,300-line  PIX  firewall 
rule  base  to  just  130  lines.  We’re  still 
waiting  on  our  official  licensed  copy  of 
the  product.  Until  then,  I’m  going  to 
continue  to  use  our  evaluation  copy  to 
consolidate  our  other  firewalls. 

Do  you  have  any  experience  or  sug¬ 
gestions  regarding  centralized  security 
management  that  might  make  this 
process  go  faster?  If  so,  please  share 
them  in  the  Security  Manager’s  Journal 
forum.  I 

Ol  \\r\r  Discuss  this  week's  column  and 
w  U1UV  catch  up  on  the  latest  security 
T  developments  online  at: 

I  ill  www.computerworld.com/q?q2000 
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This  week's  journal  is  written  by  a  real  security  manager.  "Mathias  Thurman,"  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  mathias_thurman@yahoo.com  or  go  to  the  Security  Manager's  Journal  forum. 
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E-mail  broadcasting  has  never  been  so  easy! 

1.866.293.9400 


Mitsubishi  X70UX 

XGA  *1100  Lumens  •  7  lbs. 
3  Year  Warranty 


Mitsubishi  X400 

XGA  •  3000  Lumens  •  14.7  lbs. 

$4,495 


$2,495 


Toshiba  TLP-B2 

XGA  •  1000  Lumens  •  5.8  lbs. 

$2,495 


Proxima  DX2 

XGA  •  1000  Lumens  •  5  lbs. 
DLP  Technology 

$1,995 


Proxima  DP6850 

XGA*  1500  Lumens*  13.2  lbs. 

$2,695 


ViewSonic  PJ860/PJ1060 

PJ860  •  SVGA  •  2000  Lumens  •  13.2  lbs. 
PJ1060  •  XGA  •  2200  Lumens  •  13.2  lbs. 

PJ860  $2,495 
PJ1060  $3,495 


Proxima  DP9250+/DP9260 

DP9250+  •  XGA  •  1900  Lumens  •  13.6  lbs. 
DP9260  •  XGA  •  2200  Lumens  •  15  lbs. 

DP9250+  $2,995 
DP9260  $3,295 


MeW 

Luxeon  VI 

SVGA  •  1000  Lumens  •  7.2  lbs. 
3  Year  Warranty 

$1,695 


ADTECH 

Empower  your  presentations 

CALL  800-419-0023 

For  the  best  deals  in  New,  Used,  B  Stock  and  Closeout  projectors,  goto ... 

www.adtech-sys.com/cp 

Epson  •  Hitachi  •  InFocus  •  Mitsubishi  •  Panasonic  •  Plus  •  Proxima  •  Sanyo  •  Toshiba  •  ViewSonic 
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Few  companies  see  the  full  scope  of 
the  contribution  IT  can  make  to  their 
business.  Fireman's  Fund,  a  leading 
insurance  company,  will  actively 
empower  you  to  make  that  difference. 
Our  Shared  Services  infrastructure 
positions  you  to  make  decisions  with  a 
tangible  impact  on  the  profitability  of 
technological  solutions.  We'll  give  you 
the  accountability  you  crave  and 
inspire  you  to  make  the  most  of  it  - 
with  lucid  guiding  principles, 
energized  co-workers,  and  exceptional 
rewards.  With  your  commitment,  and 
that  of  our  global  parent,  Allianz  AC, 
there's  nothing  we  can’t  accomplish. 


MAKE  YOUR 
OLD  JOB 
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Application  Developer 

Advance  your  coding,  testing  and  debugging  skills  leading  development  of  a  platform-independent 
user  interface  for  OS/2  applications.  Create  new  N-Tier  applications  and  critically  analyze  vendor 
proposals  and  solutions. 

Business  Systems  Analyst 

Play  a  key  role  creating  IT  solutions  to  enable  achievement  of  business  goals.  Interview  users  and 
conduct  feasibility  studies  to  determine  system  specifications,  then  implement  testing  and  ongoing 
evaluation  of  solutions.  Responsibilities  range  from  promoting  efficiencies  within  client  business  areas 
to  facilitating  workflow  within  IT. 

Project  Manager 

Manage  multiple  IT  projects  such  as  business  applications,  architecture,  data  marts,  operational  data 
stores  and  infrastructure.  Take  responsibility  for  the  complete  project  lifecycle  from  developing  tactical 
and  strategic  approaches  to  cost/benefit  analysis  and  risk  assessment. 

Web  Application  Developer 

Analyze  requirements,  design  and  program  applications  for  Enterprise  e-Business  projects,  working 
closely  with  consultants,  business  analysts  and  other  developers.  Applications  will  primarily  be  deployed 
on  WebSphere  servers  running  on  AIX  platforms. 


These  are  examples  of  the  types  of  positions  you  may  find  at  various  locations  of  Fireman's  Fund. 

Be  the  first  to  hear  about  Fireman's  Fund  opportunities  that  are  relevant  to  you,  with  our  newly 
launched  Career  Navigator.  Take  two  minutes  to  register  and  create  your  skills  profile  and  we'll  match  it 
against  every  position  that  becomes  available.  When  a  good  match  comes  up  you'll  instantly  be  notified 
by  email,  and  can  decide  whether  to  take  the  next  step.  It's  a  great  way  to  let  your  perfect  job  find  you. 

www.firemansfund.com/careers/ita32.html 


IT  CAREERS 

Advertising  Supplement 


IT  Careers  in  Financial  Services 


In  the  not  so  distant  future, 
your  cell  phone  will  ring  to 
alert  you  that  your  checking 
account  has  reached  a 
pre-determined  level.  Do 
you  want  to  shift  funds  from 
your  money-market  account? 

You'll  transmit  your  decision 
using  the  phone. 

That's  banking  anywhere,  anytime, 
anyway  in  the  21st  century  -  and  it's 
the  goal  of  an  industry  that's  quickly 
consolidating  to  respond  to  total 
financial  needs  -  banking,  investing 
and  insurance.  It's  also  what  continues  to  drive 
integration  of  an  increasingly  complex  information 
technology  suite  and  hiring  at  most  every 
mega-bank  in  the  United  States. 

DonTrotta,  chief  technology  officer  for  Citibanking 
North  America,  says  banking  remains  a  multi¬ 
channel  business  where  customers  call,  click  or 
stop  in.  "That's  the  cool  thing  -  the  integration  of 
customer  experience  across  all  the  channels. 
When  we  originally  came  out  with  our  mission  to 


provide  financial  services  anytime 
anywhere,  many  of  the  things  we 
can  do  today  didn't  even  exist," 
he  says. 

One  of  the  primary  challenges 
faced  by  financial  IT  leaders  is 
creating  a  sense  of  personality  - 
and  brand  loyalty  -  through  the 
various  channels  by  which  services 
are  offered.  "When  a  customer 
uses  an  ATM,  goes  to  our  web  site 
or  visits  a  branch,  we  want  them  to 
come  away  knowing  that  Citi  is 
providing  that  best  experience 
available.  We  have  our  own  [creative]  sessions  in 
which  we  imagine  every  step  of  that  customer's 
experience  -  we're  thinking  of  technology  in  an 
entirely  different  and  more  compelling  way," 
Trotta  says. 

In  addition,  the  barriers  are  falling  that  prevented 
total  consumer  financial  service,  creating  an 
entirely  new  business  model  for  the  financial 
industry  that  relies  on  information  and  data.  For 
instance,  Citigroup  is  parent  to  Citibanking,  as 


well  as  Travelers  Insurance  and  Salomon  Smith 
Barney.  According  toTrotta,  the  result  is  an 
entirely  new  business  model  driven  by  customer 
need  vs.  specific  products. 

To  fulfill  this  new  business  model, Trotta  and  his 
peers  are  looking  for  people  who  can  analyze  the 
framework  of  the  business  and  customer  needs, 
and  then  apply  technology.  "We  need  people  who 
can  create  solutions  for  customers  and  who  have 
the  ability  to  acquire  new  technology  skills,"  he 
says. The  career  path  in  the  financial  industry  for 
IT  experts  is  broad,  according  toTrotta.  "We  have 
a  significant  number  of  former  IT  leaders  who 
now  head  businesses."The  industry  has  remained 
stable  in  terms  of  employment  for  IT  profession¬ 
als  as  demand  for  integration,  security,  modeling, 
service  and  support  has  continued  to  develop. 

■=■  1  Lv  VJ  SOLUTIONS 
For  more  job  opportunities  with  financial  services  firms,  turn  to  the 
pages  of  ITcareers. 

•  If  you'd  like  to  take  part  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 


Look  who’s 
hiring  at 
ITcareers.com 


Every  day  hiring  managers  turn 
to  ITcareers.com  for  the  best  IT 
candidates.They  know  us  and 
they  know  we  can  deliver. 


If  you  want  a  better  challenge, 
we  challenge  you  to  find  a  better 
IT  career  site  than  ITcareers.com. 


Computerworld  •  InfoWorld  •  Network  World  •  March  25,  2002 


IT  CAREERS 


the  place  where  your  fellow  readers 
are  getting  a  jump 
on  even  more  of 

the  world's  best  jobs. 

Stop  in  for  a  visit. 

See  for  yourself. 


Thought  we  might  find  you 
here. 

At  Microsoft,  we  search  all  over 
the  world  for  the  best  and 
brightest  candidates.  Which 
brings  us  to  you.  We  have  the 
following  opportunities  available: 

•  Redmond.  WA 

Software  Engineers,  Program 
Managers,  Support  Engineers, 
Product  Managers,  Comput¬ 
ational  Linguists,  Analysts, 
Financial  Analysts,  Business 
Analysts,  Database  Adminis¬ 
trators,  Instructional  Designers, 
Product  Designers,  Systems 
Engineers,  Technical  Writers 
and  Editors,  Usability  Engineers, 
Artists,  Technical  Evangelists, 
Strategy  Managers,  Linguistic 
Test  Engineers,  Consultants 

•  LA  Area,  SF/Bay  Area,  CA 
Software  Engineers  (Design, 
Support,  Communications, 
Systems,  Test);  Consultants  & 
Sr.  Consultants;  Program  Mana¬ 
gers;  Product  Managers;  Support 
Analysts;  Comp.  Systems  Anal¬ 
ysts;  Technical  Managers;  Bus¬ 
iness  Strategy  Analysts 

•  Washington  D.C. 

Consultants;  Business  Analysts, 
Technology  Specialists 

•  Waltham,  MA 

Technical  Product  Specialists 

•  Berkeley  Heights,  NJ 
Business  Strategy  Analysts, 
Consultants 

•  New  York,  NY 

Consultants,  Sales  Support 
Coordinators 

•  Charlotte,  NC 

Support  Engineers,  Software 
Engineers,  Program  Managers 

•  Phoenix,  AZ 

Comp.  Systems  Analyst/Con¬ 
sultants 

•  Reno,  Nevada 
Support  Analysts 

•  Southfield,  Ml 

Scientific  Technician/Technologist; 
Managing  Consultants/Consul- 
ants 

All  positions  offer  competitive 
salary  and  excellent  benefits, 
including  bonuses  and  stock 
options.  E-mail  your  resume  in 
ASCII  text  format  to:  resume 
@  microsoft.com  (indicate  Job 
Code  A22dn-0324  in  the  subject 
header).  Or  mail  your  resume 
to:  Microsoft  Corporation,  Attn: 
Recruiting  Department,  Job 
Code:  A22dn-0324,  One 

Microsoft  Way,  Redmond,  WA 
98052-8303.  No  phone  calls 
please.  We  are  an  equal  oppor¬ 
tunity  employer  and  support 
workforce  diversity.  Please  visit 
our  Web  site  for  more  informa¬ 
tion. 


Microsalt 

microsoft.com/jobs 


www.microsoft.com/jobs 


TECHNICAL 

SBI  is  looking  for  the  following 
positions  for  its  offices  in  Houston, 
TX,  San  Francisco,  CA,  Warren, 
NJ,  Portland,  OR  and  Salt  Lake 
City,  UT.  Programmer  Analysts, 
Technical  Architects,  Graphic 
Designers,  Business  Strategists, 
Systems  Analysts,  Software 
Engineers.  Resumes  by  email  or 
fax  only  to  HR.  SBI,  2825  East 
Cottonwood  Parkway,  Suite  480, 
Salt  Lake  City,  UT,  84121; 
careers@sbiandcompany.com; 
Fax  (801)  733-3201. 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 


Fiesta^TechNet 

Information  Technology.  Window  to  the  Future 


Henry  B.  Gonzalez  Convention  Center 
San  Antonio,  Texas  |  April  22  -  24, 2002 


Co-Sponsored  by  the  AFCCA  Alamo 
Chapter,  AFCEA  International,  and 
the  Billy  Mitchell  Chapter  of  the 
Association  of  Old  Crows 


mi 


For  information  contact 
Terry  Rogers  at  _- 
trogers@afcea.org  or 
(703)  631-6238 


Registration  and 
Program  Details 

www.afcea.org 


Who  Should  Attend: 

Military,  Medical, 
Technology  and  Law 
Enforcement  Professionals, 
IT  Professionals, 
Communicators,  and 
Intelligence  Professionals 

Featured  Speakers: 

•  Gen  Robert  "Doc" 
Foglesong,  USAF  (invited) 
Vice  Chief  of  Staff 
United  States  Air  Force 

•  PaulChiapparone 
Executive  Vice  President  of 
Operations 

EDS 

•  Gen  Ralph  E.  Eberhart, 
USAF  (invited) 

Commander  in  Chief 
U.S.  Space  Command 


Panels:  ■ ;  C 

•  Information  Assurance/ 
Information  Operations 
Moderator: 

LtGen  Michael  V.  Hayden, 
USAF 

Director 

National  Security  Agency 

•  Information  Technology 
Moderator: 

Dr.  Anthony  J.  Tether 
Director 

Defense  Advanced 
Research  Projects  Agency 

•  Homeland  Security 
Moderator: 

LtGen  Kenneth  A. 
Minihan,  USAF  (Ret.) 
Former  Director 
National  Security  Agency 


THE  14th  ANNUAL 


&NMHCC 

I  i  Uniting  Healthcare  Leaders 


April  15  -18,  2002 

Baltimore  Convention  Center  •  Baltimore,  MD 


Register  before 
March  25  and 
save  $200! 


The  nation’s  largest  and  most  diverse  congress  and  exposition — serving 
as  the  “Common  Ground”  for  health  purchasers,  payors  and  providers 

•  Network  with  thousands  •  Over  150  diverse  •  Visit  hundreds 

of  your  peers  sessions  of  vendors 

Over  30  Leading  Keynote  Presenters  Including: 

The  Regulatory  Review 

Honorable 
Christopher  S.  Bond 

R-Missouri,  US  Senate 


Alain  Enthoven,  PhD 

Professor. 

Stanford  University 
(Moderator) 


Congressman  Pete  Stark 

D-California,  13th  District, 
Ranking  Minority  Member, 
Health  Subcommittee, 
Ways  and  Means 


Congressman  Tom  Allen 

D-Maine,  1st  District. 
Co-Chairman.  House 
Prescription  Drug 
Task  Force 


THE  NATIONAL  MANAGED  HEALTH  CARE  CONGRESS 
For  more  information  or  to  register  visit 
www.nmhcc.org  or  call  888.882.2500 

Priority  Code:206-AIDG'3 
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Job  Number  SAT-203:Two  full 
time  positions  for  Senior  Systems 
Analysts  as  team  leaders. 
Provides  requirements  analysis, 
database  design/implementation 
of  web-based  projects  using 
C0M+,  Visual  Basic,  JavaScript, 
VBScript,  IIS  5.0,  Oracle,  SQL 
Server  2000,  ASP  and  TOAD. 
Provide  technical  assistance  to 
Business  Development  in  support 
of  bid  and  proposal  development 
for  education  related  projects. 
Position  requires  MS  in  Computer 
Science  or  equivalent  and  3 
yr.  exp.  with  client  server/web 
applications. 

Job  Number  SAE-203:  Sr. 
Systems  Analyst  experienced  to 
perform  system  integration, 
analysis,  design  and  development. 
Implementation,  Support  of 
2-tier  and  3-tier  business  appli¬ 
cations  using  Oracle,  PL/SQL, 
PL/SQL  Cartridges,  C,  Visual 
Basic,  Active  Reports,  ASP, 
JavaScript,  HTML.  Powerbuilder, 
IIS,  PVCS,  UNIX,  Visual 
SourceSafe,  Data  modeling  us¬ 
ing  ERWIN  &  Visio  2000,  Install/ 
Administer/support  Windows  NT/ 
Novel  Netware  networks,  manage/ 
assist  Programmers.  Position 
requires  BS  +  5  yr.  exp.  in  job 
duties. 

Job  Number  SAS-203:  Program¬ 
mer  Analyst  to  perform  system 
integration,  programming  using 
Oracle,  Visual  Basic,  Active 
Reports,  ASP,  JavaScript, 
HTML,  PL/SQL,  Toad,  SQL 
Server  2000,  and  Visual  Source¬ 
Safe  on  Windows  NT  network 
using  client  server  and  web 
applications,  modeling  using 
ERWIN  &  Visio  2000.  Position 
requires  BS  +  1  yr.  general 
software  consulting  exp. 

All  positions  offer  competitive 
salaries.  Refer  to  Job  Number 
and  send  resume  to  Staffing 
Manager,  Enterprises  Computing 
Services,  Inc.,  8744  Main  Street, 
Suite  101,  Woodstock,  GA 
30188.  Include  proof  of  legal 
authority  to  work  permanently  in 
the  United  States. 


INFORMATION 

TECHNOLOGY 

OPPORTUNITIES 

Putnam  Investments,  a  global 
money  management  firm,  handles 
investments  of  more  than  14 
million  shareholders  and  2,500 
institutional  clients.  At  Putnam, 
we  manage  over  $300  billion  in 
assets,  including  mutual  funds, 
retirement  plans  and  pension 
funds. 

We  offer  a  wide  range  of  infor¬ 
mation  technology  positions  in 
Massachusetts  at  our  offices  in 
Andover,  Franklin,  and  Boston. 
All  positions  require  at  least  a 
Bachelor’s  or  equivalent  degree, 
together  with  2  to  8+  years 
job-relevant  experience.  All 
candidates  must  evidence 
superior  credentials: 

•  Application  Programmers 
(NetDy-namics,  Java/J2EE,  C++ 
with  financial  applications 
programming  experience;  others) 

•  Data  Warehouse  (Strong 
Informatica  experience) 

•  Developers 

•  Business  Systems  Analysts 
(Asset  Management  industry 
experience) 

•  Application  Project  Managers 
(Investment  industry  experience) 

•  Unix  Systems  Administrators 

Generous  benefits  and  starting 
(base)  salaries  from  $65,000  - 
$115,000,  commensurate  with 
the  positions'  specific  responsi¬ 
bilities. 

Please  mail/fax/email  your 
resume,  indicating  Reference 
Code  ■JMR-IMSP,"  to: 

Putnam  Investments,  Resume 
Processing  Center  (C-36-H),  7 
Shattuck  Road,  Andover,  MA 
01810;  Fax:  617/760-0613. 
Email  Recruiterl  @  putnam.com 
(text  format  only). 

Putnam  Investments  is  an 
Affirmative  Action  /  Equal 
Opportunity  Employer. 


Senior  Software  Engineer/DBA 
to  provide  consulting  services  for 
clients  on  distributed  systems 
development  and  n-tier  architec¬ 
tures,  develop  technical  strategies 
to  facilitate  business  process 
re-engineering,  interoperability, 
and  systems  management, 
manage  projects,  and  conduct 
Proof  of  Concept  demos,  develop 
software  architecture  for 
distribution  systems  and  develop 
e-business  solutions  using 
Object-oriented  design  &  devel¬ 
opment  methodology. To  conduct 
Data-modeling  &  Data  Ware¬ 
housing.  Develop,  implement, 
and  maintain  scalable  database 
standards  and  undertake  data¬ 
base  administration.  Design 
Content  Management  Systems 
and  develop/test  Web  Based 
Systems. 

Must  have  experience  in  cross 
platform  integration  between 
MetaSolv  TBS  System 
and  AS400  Billing  System  using 
Vitria's  EAI  software  and  with 
SAP  Sales  &  Distribution  module 
&  ABAP  language.  Must  be 
experienced  in  Database 
Administration,  B2B/B2C  eCom- 
merce  standards  &  development, 
OSS  Systems  Model/Develop¬ 
ment.  Must  have  web  develop¬ 
ment  experience  using  HTML, 
DHTML,  ASP,  Java,  J2EE,  JSP, 
Java  Servlets,  XML,  JavaScript, 
Visual  Basic,  VBScript,  Oracle 
8/8i,  and  SQL  Server  6. 5/7.0. 
Must  be  conversant  with  PHP, 
Apache,  TomCat,  EJB,  C++, 
COM/DCOM,  Active-X.  PLVSQL 
PHP  and  UML  in  a  Windows 
NT/2000,  and  Linux  environment. 

Candidate  must  possess  a 
graduate  degree  in  Information 
Systems  or  engineering  with  at 
least  three  years  of  experience. 
Send  resume  to  VisionSoft 
International,  Inc.  1278  Killian 
Knoll  Circle,  Lilburn,  GA  30047. 
Attn.  Antony  Arputharaj 


Training  Instructor  wanted  by 
optical  networking  systems 
developer  in  Oceanport,  NJ. 
Must  have  a  Bachelor's  Degree 
or  equivalent  in  Electrical  Engi¬ 
neering,  or  related  field  and 
1.5  yrs.  experience  in  Switch 
Networking  for  Optical  Networks 
in  Global  Carrier  environment 
with  at  least  six  months  as  a 
Trainer.  Respond  to  Doreen 
Connors,  HR  Department  (ref# 
025),  Tellium,  Inc.,  2  Crescent 
Place,  Oceanport,  NJ  07757. 


COMPUTER  SERVICES  POSI¬ 
TIONS  (Staten  Island,  NY) 
DATABASE  ADMINISTRATOR- 

Monitor  Oracle  db  servers. 
Required:  Bach  in  Comp.  Science., 
Engineering  field  or  Match  +  4 
yrs.  exp.  Exp.  Req's  w/Oracle, 
Unix,  Windows  NT. 

UNIX  ADMINISTRATOR-  Admin. 
AIX/UNIX  systems.  Req'd: 
Masters  in  Comp.  Science, 
Engineering  field  or  Math  +  2  yrs. 
exp.  Exp.  w/AlX,  NFS  &  korn  & 
Perl  Shell  scripting  req'd. 

Send  resume  to:  Staten  Island 
University  Hospital,  Information 
Service  Dept.,  One  Edgewater 
Plaza,  7th  FI.  Att:  Recruiting, 
Staten  Island,  NY  10305 


SR.  FUNCTIONAL  CONSUL- 
TANT-Cary,  NC  (and  sites  as  as¬ 
signed).  Deliver  MES  and  CTM 
solutions  to  pharmaceutical  cos., 
mge.  proj.  team,  lead  JAD  ses¬ 
sions,  dev.  Prototype  sys.  and 
protocols,  func./tech.specs.,  write 
SOP's,  configure  SW  modules. 
Req.  MS  Eng.,  C.S.  or  closely 
related  field,  2  yrs.  exp.  in  job 
offered  or  Mg.  Sys.  Dev.  Proj., 
2  yrs.  exp.,  (may  be  concurrent) 
with  PeopleSoft  and  IT  project 
life  cycles,  incl.  func.  and  tech, 
specs.,  develop,  and  testing. 
Resumes  to:  C.  Von  Koch, 
Propack  Data  Corp.,  2000 
Regency  Pkwy,  Ste  375,  Cary, 
NC  27511. 


IT  Senior  Manager,  Business 
Operations  Systems.  Ensure 
continuity  &  integrity  of  information 
technology  services  for  global 
textile  mfr;  manage  activities  of 
personnel  involved  in  developmt, 
support/maint.  of  system  com¬ 
ponents  &  IT  applications  includ¬ 
ing  Corporate  Portal,  Sales  Force 
Automation  (Saleslogix),  custom 
written  CRM  applications,  supply 
chain  mgmt,  &  Oracle  ERP 
System  modules  &  custom  written 
Finance  &  HR/Payroll  applications 
w/i  a  global  mfg  environment  to 
create  finance,  business,  &  mfg 
solutions;  implement  tech,  solu¬ 
tions  based  on  IBM  RS6000 
servers,  AIX/UNIX  operating 
system,  NT  networks;  manage 
dev.  &  mod.  to  custom  applications 
w /  Oracle  Portal/9iAS,  Oracle 
Reports,  Forms,  Developer, 
Java,  &  ASP;  provide  Knowledge 
Management  Capabilities  to  end 
users  with  Oracle  Discoverer,  & 
other  business  intelligence  tools; 
direct  project  leaders  working  on 
large-scale  multiple  simultaneous 
projects  to  implement  enterprise 
application  systems  solutions 
in  multiple  locations  of  global 
textile  mfr;  assist  in  IT  budget 
prep.  &  efforts  to  increase  profits 
&  competitiveness.  Prereqs:  MBA, 
plus  5  yrs  of  exp.  in  job  offered  or 
5  yrs  of  data  processing  exp.  in 
IT  applications  dev.  or  support; 
some  of  exp.  should  be  mgmt  or 
supervisory  exp.  in  this  environ¬ 
ment.  Competitive  salary.  Job 
Location:  Greensboro,  N.C.  Send 
resume  to:  Ms.  Alison  Y.  Jester, 
ATTN:  DOL-NH-1 ;  Unifi  Inc.; 
7201  West  Friendly  Ave.; 
Greensboro,  NC  27410. 


Senior  Programmer  Analyst 

Pitney  Bowes  Inc.  has  an  imme¬ 
diate  opening  in  its  Stamford,  CT 
office  for  a  Senior  Programmer 
Analyst. 

Work  as  part  of  an  e-Commerce 
application  team  within  the 
Company's  e-Commerce  and 
Product  Supply  area  of  IT 
to  develop  new  web-based 
applications  and  support  existing 
production  of  web-based 
applications  utilizing  various 
software. 

Must  possess  at  least  a  bachelor's 
degree  or  its  equivalent  in  Com¬ 
puter  Science  or  a  related  field 
and  relevant  experience  as  a 
Programmer,  as  well  as  with  the 
software  development  lifecycle, 
HTML,  Java,  JavaScript,  SQL, 
ASP,  Broadvision  and  Oracle. 

Resume  and/or  cover  letter  must 
reflect  each  requirement  above 
and  specify  reference  code  SPA 
or  it  will  be  rejected. 

Forward  resume  to  Robbin  Drew 
Elliott,  Pitney  Bowes  Inc.,  One 
Elmcroft  Road,  Stamford,  CT 
06926-0700. 


F/T  Projects  Consultant.  Re¬ 
sponsible  for  providing  technical 
support  for  database  adminis¬ 
tration  &  for  updating  Oracle 
databases  &  initiation  of  new 
code  path  policies  working  w/ 
Oracle  &  C  programming,  UNIX, 
SQL  &  PL/SQL.  Assist  in  devel¬ 
oping  databases  for  translation 
purposes  &  creating  new  appli¬ 
cations  to  initiate  new  product 
releases  to  customers  &  data¬ 
base  tables.  Develop  testing 
strategies,  plans,  conditions  & 
analyze  codes  to  determine 
database  population  &  defects  in 
customer's  telecommunications 
billing  software  &  document 
results.  Install  &  assist  w/  up¬ 
grades  for  in-house  translation 
tools  &  provide  support  for  trans¬ 
lation  issues  regarding  database 
or  source  code  for  the  Graphical 
User.  Must  have  Bachelor's  degree 
in  CS,  Engineering  or  related 
field.  Foreign  degree  equiv.  ac¬ 
cepted.  Must  have  1  yr.  exp.  in 
job  offered  or  position  w/  same 
duties.  Send  resume:  Betsy 
Moya,  SchlumbergerSema,  701 
Waterford  Way,  Suite  300,  Miami, 
FL  33126. 


SYSTEMS/BUSINESS  ANALYST: 
Rome,  GA:  Produce  requirements 
documentation  for  computer  soft¬ 
ware  developed  for  commercial 
use  to  support  in-house  applica¬ 
tions.  Function  as  the  principal 
business  analyst  for  VP  in 
charge  of  software  product 
development.  Assist  VP  in  the  life 
cycle  mgmt  of  computer  software 
developed  by  the  co.  Communicate 
w/exec  project  sponsors,  mktg  & 
user  reps  to  understand  clients’ 
needs  for  the  proposed  system 
&  address  concerns  re  business 
&  applications.  Communicate  w / 
product  users  &  propose  modifs 
for  product  functionality  into  soft¬ 
ware  programming  specs.  Utilize 
accepted  vocab  of  the  application 
domain  to  focus  discussions  w 
/users  &  clarify  user  goals  &  use 
cases.  Utilize  computer  systems 
analysis  &  design,  to  assist  com¬ 
puter  programmers  to  translate 
business  system  requirements 
into  computer  programming 
specs.  Bachelor’s  or  equivalent 
in  Computer  Science,  Business 
Admin.,  Commerce  or  Engineering 
&  2  yrs  exp  in  the  job  offered  or 
in  a  related  business,  systems 
analysis  position  involving  defin¬ 
ition,  development  &  implemen¬ 
tation  of  computer  systems  to 
meet  clients'  business  objectives. 
Alternatively,  employer  will  accept 
as  qualified  4  yrs  exp  in  the  job 
offered  or  4  yrs  exp  in  a  related 
business,  systems  analysis 
position.  Exp  must  include  at 
least  2  yrs  exp  in  using  C++/ 
Delphi  &  Object  Oriented  analysis 
&  development.  40  hrs  per  wk. 
$60K  per  yr.  Must  have  legal 
authority  to  work  in  U.S.  Forward 
resume  to  Universal  Tax  Systems, 
6  Mathis  Drive,  N.W.,  Rome,  GA 
30164-2729. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  provide  on  site 
consulting  to  perform  object 
oriented  design  and  development 
of  enterprise  wide  software 
applications  using  Oracle,  Inter- 
base,  ASP,  IIS  and  Visual  Basic; 
object  development  using  COM, 
COM+,  CORBA,  ActiveX  and 
MTS;  development  of  life  cycle 
systems  using  XML  and  XSL 
technologies.  Require:  MS  in 
Computer  Science/Electronics 
Engineering  and  two  years 
experience  in  the  job  offered  or 
as  Programmer/Analyst.  40% 
travel  to  client  sites  within  the 
United  States.  Competitive 
salary  and  benefits,  40  hours/ 
week,  M-F,  8  am  to  5  pm.  Apply 
with  resume  to:  President, 
ObjectNet  Technologies,  Inc., 
1117  Perimeter  Center  West, 
Suite  N402,  Atlanta,  GA  30338. 


Software  Engineers  needed  by 
NJ  Based  IT  Co.-  Masters  Deg 
with  1-2  yrs  Exp/Bach.  With  5yrs 
exp;  Programmer  Analyst-  Bach. 
Deg  with  1  -2yrs  Exp  in  job.  Exp. 
in  skill  sets  incl.:  C,  C++,  Java, 
Unix,  TCP/IP,  UDP,  Perl,  STL 
Library,  Posix  Thread  Library, 
Oracle.  Send  2  resumes  to  HRD, 
Universal  Business  Consulting, 
Inc.  3530,  Rte  27,  Kendall  Park, 
NJ  08824 


Prog/Anal,  Sys  Anal,  Sftrwr  Engr 
or  Comp  Engr  &  Sr  Prog  Anal,  Sr 
DB  Anal,  Sr  DB  Adm,  Sr  Sfwr 
Engr  or  Sr  Sys  Anal:  Design,  devel 
&  test  comp  progs  for  biz  apps 
usng  Java,  J2EE,  EJB,  XML, 
Weblogic,  VC++,  C++,  Com/Dcom, 
Lotus  Notes/Domino,  VB,  ASP. 
UNIX,  Oracle,  &  SQL  srvr.  BS  (or 
equiv)  in  Engg  (any  type),  CS, 
CE.  CIS,  EE  & 1-5  yrs  exp. 

Sys  Adm,  Ntwk  Adm,  Ntwk  Anal, 
Sftwr  Engr  or  Ntwk  Engr:  Install, 
config/8.  suprt  lan/wan,  usng 
Unix,  WIN  NT,  Novell  Netwr,  Cis¬ 
co  Rtrs  &  Cisco  Swtchs.  BS  (or 
equiv)  Engg  (any  type),  CS,  CE, 
CIS,  EE  &  1  yrexp. 

Res:  HR,  Fulcrum  Logic,  313 
South  St,  #104,  Fanwood,  NJ 
07023/state  position  interest. 


IT  dvlpmnt  &  cnsltnt  company 
sks  SAP  Basis  Adminstrator  & 
SAP  DBA:  SAP  Administrator  to 
Integrate  all  aspcts  of  mgmt  & 
oprtn  proc.  using  SAP  4.6B., 
CRM,  Workplace,  Archiving, 
Sys'  Admiral,  Barcode  print, 
system  copy  etc.  Plan  and 
design  SAP  R/3  basis  sys  tech 
env  &  arch.  Req:  BS  Comp  Sci  or 
othr  Science  degree,  SAP  Basis 
Certification  &  2  yrs  exp.  SAP 
DBA  to  be  rspnsbl  for  DB 
re-orgnztn  &  tech  spprt  for 
Oracle  8i,  Sybase  Repl  server  & 
MS  SQL  Server  2000  in  SAP 
R/3  environ.  Req:  BS  in  Nat. 
Science,  Eng  or  Comp.  Sci., 
Oracle  Certification  &  2  yrs 
exp.  Resume  to  HR  Dept.,  SDS 
America,  15  Corp.  PI.  South, 
Piscataway,  NJ  08854.  Specify 
desired  position. 


Computer  Programmer  -  Design, 
develop,  test,  and  implement 
computer  programs  for  business 
applications  using  the  following 
(but  not  limited  to)  skills.  VB,  SQL 
server,  FORTRAN,  COBOL, 
PASCAL,  C,  LISP,  PROLOG, 
PL/SQL  in  Unix,  DOS,  and  WIN 
environments.  Develop  reports 
using  Developer  2000  &  generate 
reports  using  Crystal  reports  8.0. 
Convert  Clipper  programs  into 
VB.  Program  security  software 
for  WIN  &  UNIX  platforms.  Min: 
BS  (or  equiv)  in  Comp  Sci, 
Comp  Engg,  or  Elec  Engg  &  3 
yrexp.  Resume:  HR  Dept,  Rayex 
Inc,  102  Tamarack  Circle,  Skillman, 
NJ  08558 


Web  Developer,  Atlanta,  GA. 
Web-based  development  incl 
analysis,  design,  debug,  testing, 
deployment,  user  training,  support. 
Database  development/design 
using  VB  &  SQL.  Req.:  BS 
CS/ITT.  One  yr.  expr.  in  appl. 
develop.  Working  knowledge 
(through  coursework  or  exper.) 
inTCP/IP,  COM+,  MTS,  Windows 
NT  security,  VB  6,  SQL  Server 
7/2000,  InMagic  DB/Text  Web 
Publisher,  Site  Server,  XML/XSL/ 
CSS,  VBscript  &  JavaScript, 
37.5-hrs/wk.  Resume:  J.  Miskovsky, 
PGFM,  191  Peachtree  St„ 
Atlanta,  GA  30303. 


Director,  Technical  Management: 
needed  to  oversee  client-server/ 
e-business  applications  devel¬ 
opment  and  consulting  projects. 
Respond  to  Entegram,  LLC, 
Req.  31 8, 5  Waterside  Crossing, 
Windsor,  Connecticut  06095. 
EOE/F/M/V/D. 


Computer  Consultant 

Meet  with  clients  in  order  to 
ascertain  their  business  needs. 
Design  and  implement  an 
e-commerce  solution  based  on 
client  specifications.  In  addition, 
assist  the  client  in  launching  the 
new  application,  provide  technical 
assistance,  and  make  design 
changes  as  the  needs  of  the 
client  evolve.  Must  have  BA  or 
BS  in  Eng.,  CS  or  Related  & 
2yrs.  exp.  or  2yrs.  exp.  in  relat¬ 
ed  position  w/ability  to  use: 
UNIX,  Oracle,  &  SQL  Forms. 
40.0  hrs./wk  8:00  AM  -  5:00  PM 
$72.000/Yr. 

Applicants  send  cover  letter 
and  resume  to; 

Biju  John 
BY2K  Soft,  Inc. 

6044  S.  Norcross  Tucker  Road, 
Ste.  203 

Norcross,  GA  30093 


TeleKnowledge,  Inc.,  a  leading 
provider  of  advanced  content 
monetization  software  solutions 
has  an  immediate  opening  for: 
Senior  Software  Engineer.  Must 
have  B.S.  in  Comp  Sci/Math 
or  related  fields  plus  3-5  yrs 
experience  in  the  IT  field.  Send 
resumes  to: 

HR  Director,  TeleKnowledge  Inc. 
1671  Worcester  Ra  Framingham, 
MA  01701 ,  USA.  Fax:  (508)  620- 
1414.  Sales@TeleKnowledge. 
com.  EOE 


Systems  Analyst  wanted  for  NJ 
based  Co  for  job  Iocs  throughout 
the  USA.  Must  have  proficiency 
in  RDBMS  (e.g.  Oracle,  Sybase, 
SQL  Server)  and  Centura,  and  4 
years  of  exp.  in  Comp.  Software 
Developing  and/or  Consulting. 
Respond  to:  HR  Dept.,  Akshay 
Software  International,  Inc.,  2025 
S.  Lincoln  Hwy.,  Ste.  207,  Edison, 
NJ  08817.  (Ref:  RG8159IM). 


Talent  is 
the  fuel  of 
the  new 
economy. 


Fill  up  with 
FTcareers. 


Tfcareers  and 
IT  careers.com 
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Costco  seeks  Ul/App.  Progr.  for 
HQ  office  in  Issaquah.  DESC: 
Rev.  user  reqs.  &  bus.  specs,  for 
comp,  warehouse  inventory/pric¬ 
ing  info.  sys.  Dsgn,  dev.  &  impl. 
Ul,  progs,  &  apps.  to  access  info, 
stored  on  DB2  util.  RPG  on 
AS/400  plats.  REQS:  2  yrs.  exp. 
dsgn,  dev,  &  impl.  Ul.  progs,  & 
apps  to  access  info,  stored  on 
DB2  util.  RPG  on  AS/400  plats. 
Prem.  sal.  +  benes.  Pis.  reply  to 
T.  Valdez,  Job#  CW-102,  999 
Lake  DR,  Issaquah,  WA  98027. 


EpicEdge  is  seeking  Java 
Developers/Sr.  Java  Developers. 
Requirements  include  BS/MS  or 
equivalent.  Java,  Commercial 
Application  Server  and  Integration 
experience  required.  Client/ 
Server  experience  needed. 

For  consideration  email  or  mail 
your  resume  by  April  8th  to 
jobs2@epicedge.com  or  to 
EpicEdge,  Human  Resources, 
5508  Highway  290  West,  #300, 
Austin,  TX  78735.  Positions  are 
located  in  Seattle,  Washington. 
No  relocation  assistance  provided. 
Absolutely  no  agency  inquiries 
accepted.  Only  qualified  candi¬ 
dates  will  be  contacted. 


♦ 


Exp'ed  Prog/Sys  Analysts,  Net¬ 
work  Engineers,  DBAs  and  S/W 
Engineers  required  for  branch 
locations  in  Santa  Clara,  CA,  Mt. 
Laurel  NJ,  Conshohocken,  PA. 
Skill  sets  -  C,  C++,  Java,  HTML 
on  UNIX/Windows;  Visual  Basic, 
Visual  C++,  Power  Builder; 
Oracle,  PL/SQL,  Pro"C;  UNIX, 
Windows  2000/NT  Sys.  Admin. 
Require  BS/MS  in  CS/Engg/ 
Math/Business/Science  (or  its 
foreign  equiv  and/or  equiv.  in 
education  and  exp.)  And  relevant 
exp.  Travel/  Relocation  required. 
Salary  commensurate  with  exp. 
Resumes  to:  HR,  Fourth  Tech¬ 
nologies,  27  Roland  Avenue, 
STE  B,  Mount  Lourel,  NJ  08054. 
Indicate  on  resume  the  branch 
office  you  are  applying  for. 


BUSINESS  ANALYST/  PRO¬ 
GRAMMER  to  combine  financial 
modeling/software  development 
using  Delphi  5.0, 6.0,client  server 
environment,  SQL  server  2000, 
interface,  conduits  writing.  Archi¬ 
tects  software  solutions  for 
specific  business  needs.  Require: 
must  have  a  minimum  Masters  in 
Computer  Science/related  sub¬ 
jects  &  2  years  of  experience;  will 
accept  Bachelor's  degree  with 
5  years  of  experience.  Salary: 
$45-55K.Fax  resumes  to  478- 
742-6449 


♦ 


Software  Architect  -  Lead  engi¬ 
neers  in  specification,  technical 
architecture  and  development  of 
business  process  integration 
product  suite  for  vertical  markets. 
Requires  Master's  degree  in 
Computer  Science  plus  two 
years  experience  designing  and 
developing  large-scale  software 
systems.  Demonstrated  ability  to 
provide  technical  leadership  to 
software  development  team  and 
to  design  distributed  systems 
using  OO,  Java,  and  CORBA. 
Apply  to:  AP  Engines.  Inc., 
ATTN:  Quirk,  Five  Clock  Tower 
Place,  Suite  250,  Maynard,  MA 
01754. 


Senior  Oracle  Database  Admin¬ 
istrator  to  design,  develop  and 
implement  new  applications  for 
Oracle  databases,  design  and 
develop  ongoing  adjustments  in 
software  to  maintain  the  databas¬ 
es,  implement  BMC  software 
applications,  establish  and 
maintain  documentation  of 
applications  and  procedures, 
and  provide  technical  software 
development  expertise  on  projects 
throughout  the  company  utilizing 
UNIX  OS,  UNIX  Shell,  Windows 
NT, IBM  AIX,  Sun  Solaris,  Data 
Modeling,  SQL,  ERWIN  and 
BMC.  Requires  Bachelors  or 
equivalent  level  degree  in 
Computer  Science,  Computer 
Information  Systems,  Engineering, 
Math,  Physics,  or  a  closely  related 
field,  and  3  years  experience  in 
Oracle  Database  Administration. 
Qualified  applicants  must 
presently  be  eligible  for  permanent 
employment  in  the  United 
States.  Applicant  must  be  able 
to  perform  job  duties  on  date  of 
application.  Send  resumes: 
Mr.  Anthony  Beasley,  Human 
Resources  Manager,  Deutsche 
Financial  Services  Corporation, 
655  Maryville  Centre  Drive,  St. 
Louis,  Missouri  63141.  EOE. 


SAP  Consultant:  Perform  SAP 
implementation  to  module  SD, 
MM,  WM,  SM,  ASAP;  design/ 
configure  R/2,  R/3,  R/3  IS-U; 
develop  training  material  &  conduct 
training;  write  programs  for  data 
conversion;  configure  resource 
related  billing,  classification 
system  &  variant  configuration. 
Extensive  traveling.  Req  4  yrs 
work  exp.  hrs:  8a-5p.  M-F.  Send 
resume  to  Baer  Group,  53 
Perimeter  Center  E  Ste  100, 
Atlanta,  GA  30346.  Ref  WG. 


Systems  Administrator 
Design,  deploy,  upgrade  &  main¬ 
tain  complex  Local  Area  Networks 
(LAN)  based  on  client  needs  and 
budget.  Must  have  BS  or  equiv. 
in  CS  or  EE  &  3  yrs.  exp.  or  3yrs. 
exp.  in  a  related  position  w/ability 
to  use:  Windows  NT/2000  Server 
and  MS  Exchange  Server  5.5. 
40.0  hrs./wk  8:00  AM  -  5:00  PM 
$63,000/Yr. 

Applicants  send  cover  letter 
and  resume  to: 

Ambrish  R.  Kochikar 
Cyber  Korp,  Inc. 

9667  B  Main  Street 
Fairfax,  VA  22031 


BrightStar  is  searching  for 
SAP  Analysts/Consultants 
for  Siebel,  Basis,  Sales, 
Distribution,  HR,  or  Payroll 
projects.  Send  resumes  to: 
BrightStar,  4900  Hopyard  Rd., 
Suite  200,  Pleasanton,  CA 
94588,  Attn:  HR;  or  e-mail  to 
jobs  @  brightstar.com. 


Millennium  International  is  looking 


for  a  Web  Programmer. 


Requires  bachelors  degree  in 


I.T.  or  related  and  experience. 


Fax  resume  to  (801)  596-7119. 


Software  Programmer;  Dallas, 
Texas:  Plan,  develop,  test  & 
document  programs  to  meet 
user  requirements.  Prepare 
flowcharts  and  diagrams.  De¬ 
sign  screen  displays.  Convert 
data  into  instruction  for  coding 
into  computer  language.  Enter 
codes  and  test  programs.  Re¬ 
place  or  modify  codes.  Master's 
degree  or  equivalent  in  Electrical 
Engineering  or  Computer  Sci¬ 
ence.  Coursework  must  have  in¬ 
cluded  C,  C++,  Visual  Basic, 
ASP,  JavaScript,  SQL,  UNIX, 
Telecommunications  Network 
Operations,  Data  Networks  Con¬ 
figuration  and  Administration, 
Database  Programming  and 
Administration,  COM/COM+, 
Distributed  Application  Design, 
Development  and  Implementation. 
Send  resume  to  Dawn  Valenti, 
Direct  Insite,  80  Orville  Dr. 
Bohemia,  NY  11716. 


OmniPros,  a  worldwide  provider 
of  software  solutions  seeks 
motivated  IT  professionals 
specializing  in  the  following 
areas: 

Java,  J2EE,  Oracle,  WebLogic 

Webmethod 

Vitria 

Tibco 

Portals 

Oracle  CRM  (Technical,  1 1  i) 
Oracle  Manufacturing  (Technical/ 
Functional,  1 1  i) 

Oracle  Finance  (Technical,  1 1  i) 
Business  Development/Technical 
Operations  Management 

Please  e-mail  resume  to 
careers@omnipros.com,  fax 
resume  to  (925)  249-1702,  or 
mail  resume  to: 

OmniPros  Ltd. 

3015  Hopyard  Road  Suite  T 
Pleasanton,  CA  94558 
www.omnipros.com 


ABB  Network  Management  in 
Sugar  Land,  TX  seeks  experi¬ 
enced  Software  Engineers  with 
BS  in  Computer/Electrical/ 
Electronic  Engineering  and 
Alpha-Unix,  RANGER  SCADA 
/EMS/DMS,  CISCO  and  SCCS 
skills.  Resumes  to  H.R.  Mgr. 
AJT/mas  1601  Industrial  Blvd.. 
Sugar  Land,  TX  77478  or  on-line 
to  resumes@abbnm.com 


SOFTWARE  ENGINEERS: 
Advent  Global  Solutions  one  of 
the  fastest  growing  IT  service 
companies  requires  Software 
Engineers  to  research,  design, 
develop  computer  software 
systems  and  lead  new  product 
development  projects  to  timely 
completion.  Ability  to  evaluate 
and  design  SAP  software  is 
required.  Needs  a  Masters  in 
CS/MIS  or  any  related  degree 
combined  with  1  +  years  experi¬ 
ence  or  Bachelors  with  5  years 
experience  in  designing  and 
developing  computer  software 
systems.  Please  send  resumes 
to  Advent  Global  Solutions, 
Inc.,  Human  Resources,  17314 
SH249,  Suite  #205,  Houston,  TX 
77064  or  Fax.  (281 )  970-3839. 


Software  Engineer  in  CA:  Develop 
mass  computer  storage  man¬ 
agement  software  using  C, 
Oracle,  Sun  Solaris  &  PL/SQL; 
deploy  application  software  to 
Windows  NT  &  HP  Unix;  consult 
vendors.  Extensive  travel.  Req 
MS  in  engineering,  computer 
science  or  related  plus  2 
yrs  work  exp.  Send  resume  to 
DeLaLuz  Technologies.  Inc., 
4340  Scotts  Valley  Dr.,  Ste.  D. 
Scotts  Valley,  CA  95066. 


Sun  Microsystems,  Inc.  has  the 
following  opening  in  our  Detroit, 
Michigan  location. 

NAME  OF  JOB  TITLE: 
Engineering  Services  Consultant 
TOTAL  HOURS  PER  WEEK: 

40  hours/week 
WORK  SCHEDULE; 

8:00  am  to  5:00  pm 
WAGES: 

$79, 825.00/year 
JOB  DUTIES: 

"Use  skills  in  NetDynamics,  Java 
and  other  object  oriented  and 
distributing  computing  concepts 
to  design,  develop,  deploy, 
performance  tune  and  load  test 
web-based  distributed  software 
applications;  migrate  applications 
and  troubleshoot  installations." 
EDUCATION  AND  EXPERIENCE 
REQUIREMENTS: 

MS  or  foreign  degree  equivalent 
in  Computer  Science  and  2 
years  of  related  experience  (i.e. 
Software  Engineer/Programmer) 
REF  NO.#:  200604 

For  resume  submittals,  make 
sure  to  reference  source  code: 
ADP0218AB/AH  and  mail  to: 
MDCD/ESA,  P.O.  Box  11170, 
Detroit,  Ml  48202-1170.  Sun  is 
an  Equal  Opportunity/Affirmative 
Action  Employer. 


Network  Administrator.  Design 
and  troubleshoot  enterprise 
computer  network  using  Cisco 
networking  products  and  other 
products  such  as  HP-UX  system, 
using  HP  9000  server  and  work¬ 
stations;  maintain  IBM  AS/400 
network  and  Windows  NT/2000 
network  administration  in  an 
enterprise  environment;  imple¬ 
ment  MS  BackOffice  products, 
including  Exchange.  SQL,  IIS, 
Proxy,  and  SMS;  provide  technical 
assistance;  and  implement  back¬ 
up  procedure  for  information 
system,  using  ARC  server  2000. 
Must  have  Bachelor’s  degree  in 
Computer  Science  or  related 
field,  plus  two  years  experience, 
and  knowledge  of  Cisco  equip¬ 
ment;  HP-UX  system  using  HP 
9000  network  administration; 
IBM  AS/400  and  Windows 
NT/2000  system  operation;  MS 
BackOffice  products  including 
Exchange,  SQL,  IIS,  Proxy,  and 
SMS;  and  AS/400  operation  and 
communication.  Send  resume 
with  cover  letter  to  Sears  Manu¬ 
facturing  Company,  Attn:  Gery 
Oestern,  1718  South  Concord 
St.,  Davenport,  Iowa  52802. 


♦ 


Signet  Design  Solutions,  based 
in  Austin,  TX,  seeking:  SR. 
DESIGN  ENGINEERS:  Design, 
develop  &  test  electronic  com¬ 
ponents,  products  &  systems  for 
communications,  analog  &  digital 
applications.  Candidate  must  be 
strong  in  timing  analysis,  hands- 
on  experience  w  /  physical 
synthesis  &  P&R.  Effective 
communication  skills  &  software 
scripting  ability  a  +.  Travel  to 
various  unanticipated  client  sites 
for  long  &  short  term  projects. 
MS/equiv.  in  Electrical  Engineering 
&  rel.  wk.  exp.  Mail  resume, 
transcripts,  references  and 
salary  requirements  to  Signet 
Design  Solutions,  9606  N. 
Mopac  Expwy,  STE  800  Austin, 
TX  78759 


EpicEdge  is  seeking  qualified 
candidates  for  PeopleSoft  HRMS 
and  Financial  implementations. 
Functional  or  Technical  PeopleSoft 
HRMS  or  Financials  experience 
required.  PeopleSoft  consulting 
experience  desired.  A  BS/MS  or 
equivalent  experience  is  required. 

For  consideration  email  or  mail 
your  resume  by  April  8th  to 
jobs2@epicedge.com  or  to 
EpicEdge,  Human  Resources, 
5508  Highway  290  West,  #300, 
Austin,  TX  78735.  Positions  are 
located  in  Austin,  Texas.  Some 
travel  required.  No  relocation 
assistance  provided.  Absolutely 
no  agency  inquiries  accepted. 
Only  qualified  candidates  will  be 
contacted. 


Sr.  IT  Consultant  (Sr.  Software 
Engineer)  sought  by  land  man¬ 
agement  services/solutions  com¬ 
pany  in  Denver,  CO  to  work  in 
Houston,  TX  and  other  unantici¬ 
pated  job  sites  in  the  US.  At  a 
senior  level,  design,  develop, 
enhance  and  support  integrated 
object-oriented  software  appli¬ 
cations  that  run  in  a  Windows 
environment  and/or  are  Web- 
based  for  land  management 
in  the  oil  and  gas  industry  to 
manage  multiple  leases,  contracts 
and  division  orders.  Software 
applications  incorporate  Graphical 
User  Interfaces  (GUIs),  client/ 
server  architecture  and  Oracle 
Relational  Database  Management 
Systems.  Use  PL/SQL,  JAVA, 
Visual  Basic,  Power  Builder, 
HTML.  ASP,  the  Install  Shield 
tool,  and  other  development  tools 
and  languages.  Engage  in  project 
management  as  required.  Re¬ 
quires  Bachelor's  or  foreign 
equivalent  in  computer  science, 
electronics  engineering  or  related 
field;  4  yrs.  software  develop¬ 
ment  experience;  working  knowl¬ 
edge  of  designing  and  develop¬ 
ing  oil  and  gas  software 
applications,  Oracle  and  Power 
Builder.  M-F;  8am-5pm;  $72,000/ 
yr.  Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment,  Em¬ 
ployment  &  Training  Division, 
Tower  II,  #400,  1515  Arapahoe, 
Denver,  CO  80202  &  refer  to  Job 
Order  Number  CO  5014489. 


Senior  Systems  Consultant 
sought  by  information  technology 
consulting  company  in  Denver, 
CO  to  work  in  Denver  and  other 
unanticipated  job  sites  in  the 
U.S.  At  a  senior  level,  customize 
and  implement  customer  rela¬ 
tionship  management  (CRM) 
software  at  client  sites.  Perform 
business  process  requirements 
analysis,  map  core  business 
processes  into  CRM  systems. 
Configure  CRM  systems  for 
client  information  flow,  processing 
and  output.  Requires  Master's  or 
foreign  equivalent  in  Business 
Administration;  2  yrs  exp.  per¬ 
forming  the  core  duties  and 
utilizing  the  technologies  described 
above;  certification  in  a  major 
CRM  software.  M-F;  8am-5pm; 
$85,000/yr.  Respond  by  resume 
to  James  Shimada,  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  &  Training 
Division,  Tower  II,  #400.  1515 
Arapahoe,  Denver, CO  80202  & 
refer  to  Job  Order  Number  CO 
5014435. 


iS3C  Inc  is  a  professional  software 
consulting  company  providing  a 
range  of  Consulting  Service  in 
E-Commerce,  ERP,  EAI  and  C/S 
technologies.  We  have  immediate 
full  time  openings  for  the  following 
positions,  Programmer  Analyst, 
DBA's,  Systems  Analyst,  Project 
Leaders,  Project  Managers  and 
Software  Engineers  with  minimum 
1  year  experience  in  any  of  the 
following  skills: 

1 .  Websphere  Commerce 

2.  E-commerce  (WCS)  Solution 
Architect 

3.  Broadvision 

4.  MQ  Series  Integrator,  Web- 
methods  B2B 

5.  Oracle  Apps:  Manufacturing, 
Finance 

6.  SAP:  ABAP/4,  APO,  FI/CO, 
SD/MM,  MM/PP,  HR  and  Business 
Connector 

7. BaaN:  Manufacturing,  Finance, 
Distribution,  EDI,  Baan  Tools 
and  SCM 

Bachelors  or  Masters  degree 
required  in  accordance  with 
positions.  We  will  accept  the 
foreign  equivalent  of  the  education 
and/or  its  equivalent  in  education 
and  experience.  Send  fax  or 
email  your  resume  (please  state 
publication  and  position)  to  Attn: 
Kimber  Minix,  535  E.  Diehl 
Road,  Suite333,  Naperville, 
IL-60563,  email:  kimberm® 
iS3C.com 

www.iS3C.com  EOE 
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IT  Career  Opportunities 

ALABAMA 

Consultant  -  PeopleSoft  apps.  Dev  DBs, 
reqs.  &  specs,  BA/BS,  or  equiv.  in  CS,  Bus, 
Eng,  or  rel.  &  I  yr,  exp.  in  pos,  or  Program/ 
Anal. 

CALIFORNIA 

App.  Support  Config.  install,  upgrade, 
supp.  Var.  apps.  BA/BS.  or  equiv.  in  CS.  Bus. 
Eng  or  rel. 

DB  Admin  Capacity  plan.  Create  Oracle, 
SQL  &  other  DBs.  monitor  diag..  tune  DBs 
Dev.  stored  proc..  triggers,  links  &  snapshots. 
Jr  level  in  UNIX  BA/BS.  or  equiv.  in  CS.  or 
Bus..  Eng.  or  rel.;  Sr.  level:  MS  in  CS.  Bus..  Eng., 
Physics  or  rel. 

ERP  Prod.  Specialist  •  Consulting  &  sys 
integration.  ERP  Prods.  Implement  tailored 
solutions  &  DBs.  Jr  level:  BA/BS,  or  equiv.  in 
CS..  Bus.  Eng.  or  rel.;  Sr  level:  BA/BS.  or  equiv, 
in  CS..  Bus.,  Eng.  or  rel.  &  2  yr.  IS  exp. 

Staff  Consult./Tech  Anal.  -  Dev.  &  deliv. 
techVbus.  solutions.  Test  code.  BA/BS  in  CS  , 
Bus.,  Eng.  or  rel.  &  2  yr  &  exp.  in  pos„  or  in 
SW  Dev. 

Tech.  Bus.  Team  Lead  -  Deploy  &  com¬ 
plete  projs.  Consolid  legacy  apps.  into  single 
cohesive  mission  crrt  Web-based  app.  MS 
CS/Eng. 

ILLINOIS 

Sr.  Consult  -  Implement  data  model  & 
DBA  design.  Resolve  DBA  issues.  MA/MS 
MIS.  CS. 

Staff  Consultant  -  Bus-modeling  tech¬ 
niques  &  critical  studies  central  to  success  of 
d's  orgs.  BA/BS.  CS..  Bus..  Eng.  or  rel.  &  2  yr 
exp.  in  pos.  or  as  Program/ Anal. 

MARYLAND 

Program/Anal.  -  ID.,  resolve  highly  tech, 
probs.  Dev.  timetables.  Lead  plan  &  imple¬ 
mentation  of  transition  legacy  mainframe 
sys.  to  cl/server  arch,  BA/BS  or  equiv,  in  CS„ 
Bus.,  Eng.  or  rel.  &  2  yr  exp.  Dev  Mod.  & 
write  complex  programs.  Black  Lung  Proj. 
BA/BS  CS.  IS.  Eng,  or  rel.  2yrs  exp  or  as  SW 
Dev. 

Sr.  Comp.  Scientist  -  Anal.,  solve  probs.  in 
complex  sys.  Dev.  e-comm/cl-server  apps, 
MS.  or  equiv.  in  CS,.  Bus..  Eng.  or  rel.  &  I  yr. 
exp.  m  pos.  or  as  DBA  SW  Eng.,  or  Tech. 
Specialist 

Comp.  Scientist  Dev,  tech.  &  op. 
Strategies  for  new  bus.  outsourcing  ops. 
Resp.  to  RFPs.  Dev.  cost  models.  BA/BS  or 
equiv,  MIS,  CS  or  rel  &  2yr  exp  or  as  sys.  eng. 

MISSOURI 

Sr.  ERP  Prod.  Specialist  -  Manage 
&  coordinate  teams  on  ERP  Consult, 
implement  &  sys.  mteg.  ERP  Implement 
tailored  solutions  &  DBs.  BA/BS,  or  equiv  in 
CS..  Bus,  Acctg,  Eng.  or  rel.  &  I  yr  exp.  in 
pos.  or  Consult 

OHIO 

Bus.  Designer  Design  &  rec.  bus 
solutions.  Dev..  ana.l  &  present  data.  Prep, 
proposals.  MS.  in  CS,  Bus,  Eng.  or  rel. 

Analyst  Maintain,  enhance  strategic  3-tier 
obj-onented  billing  &  cust  Serv.  apps. 
Design,  code,  test  solutions.  Jr.  Level:  BA/BS 
or  equiv.  in  CS,  Bus,  Eng.  or  rel.  Sr  Level: 
BA/BS.  or  equiv,  in  CS,  Bus,  Eng.  or  rel.  &  4 
yrs.  exp. 

VIRGINIA 

Staff  Consultant/Team  Ldr.  -  Support 
tech,  delivery  &  bus.  solutions.  MS  or  equiv. 
in  CS,  Bus,  Eng.  or  rel. 

Sr.  Info.  Eng.  Select  manage  &  imple¬ 
ment  sys.  Translate  bus.  to  tech.  reqs.  Lead 
1 0.  Design  hi-level  prog,  specs.  3  yr  college- 
level  ed.  in  CS,  Bus,  Physics,  Eng.  or  rel.  &  5 
yr.  exp.  in  pos.  or  as  Sys,  or  Prog  Anal,  Alt 
BA/BS.  or  equiv.  &  2  yr  exp. 

Comp  Scientist  -  Consult,  maintain 
services  for  PeopleSoft  HRIS.  Anal.  cl.  info. 
Customize  PeopleCode  &  PeopleSoft.  MS 
or  equiv.  in  CS,  Bus,  Eng.  or  rel. 

Comp.  Scientist  /Vial.  cl.  info,  design  & 
dev  tech  strategies  in  network  HW/SW. 
BA/BS  in  Mgmt  IS  or  rel. 

DB  Admin.  Capacity  plan.  dev.  maintain, 
troubleshoot  &  support  DBA  apps.  BA/BS. 
or  equiv.  in  Comp.  Eng,  or  rel. 

Sr.  Member  of  Tech.  Staff  Dev,  code, 
test  and  design  Mil. Traffic  Mgmt  Command 
sys.  in  Oracle  Devel  BA/BS  in  CS,  CIS,  Bus, 
or  rel. 

Sr.TechJDB  Specialist  -  Translate  bus.  to 
data  reqs,  create  DB  design.  Eval,  dev, 
install,  maintain  &  troubleshoot  DBMS. 
BA/BS,  or  equiv.  in  CS  &  5  yr.  exp.  in  pos.  or 
as  Oracle  consult 

WE  S  T  VIRGINIA 

ERP  Prod.  Specialist  Consult  &  sys  mteg 
ERP  Mgmt  Prod  Implement  tailored  ERP 
solutions  and  DBs  MS  or  equiv  in  CS,  Bus, 
Mgmt,  Eng.  or  reL 

Some  portions  may  require  a  BS/MS  degree, 
relevant  experience,  or  a  combination  of 
experience  and  college  level  education  may  be 
accepted  for  some  positions  The  flexibility  to 
travel  and  be  on-call  may  be  necessary  All 
positions  involve  public  speaking  and 
presentations  to  clients  and  prospective  clients. 
Salary  a  DOE.  Proof  of  legal  authorization  to 
work  n  the  US.  is  required. 

We  offer  excellent  compensation  and  a 
comprehensive  benefits  package  Please  forward 
your  resume  to  cschr@csc.com 

mong  KH-CW-202  n  the  subject  few 
Mi  i  Atu  Kim  Hale.  2 1 00  E.  Grand  Ave..  El 
Sogundo.  CA  90245  PlttM 
specif*  title  and  location  of  job  for  which  you  are 
apptysng  on  ycxx  application  letter.  EOE  hVF/D/V 
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Computer 

As  a  $1 80  million  industry  leader, 
we  are  able  to  provide  our  people 
with  the  kind  of  work  environ¬ 
ment,  opportunities,  benefits, 
growth  potential  and  progressive 
training  others  can’t  match.  We 
are  looking  for  IT  professionals 
with  a  minimum  of  1+  years 
experience  for  the  following  job 
titles: 

•  PROGRAMMER/ANALYST 

•  SYSTEMS  ANALYST 

•  SYSTEMS  PROGRAMMER 

•  DATABASE  ADMINISTRATOR 

•  DATABASE  ANALYST 

•  LAN  ADMINISTRATOR 
•SOFTWARE  ENGINEER 
•WEB  DEVELOPER/ARCHI¬ 
TECT 

•  DATA  WAREHOUSING  AR¬ 
CHITECT 

•  IT  PROJECT  MANAGER 

•  BUSINESS  ANALYST 
•SAP  FUNCTIONAL  AND 

TECHNICAL  EXPERTS 
•HIGH  LEVEL  SOLUTIONS 
SALES  EXECUTIVES 

•  QA/TESTER 
•TECHNICAL  RECRUITER 


Our  skills  sets  include: 

•  CLIENT/SERVER 

•ERP  -  SAP  ORACLE,  PEOPLE 
SOFT 

•  INTERNET 

•  E-COMMERCE 
•MAINFRAME 

•  MID-RANGE,  AS/400 

•  CRM  -  SIEBEL 

•  DATA  MODELING 

Contact  the  Corporate  Head¬ 
quarters  for  positions  available  in 
the  following  areas:  Atlanta, 
Chicago,  Connecticut,  Denver, 
Florida,  Massachusetts,  New 
Jersey,  New  York,  North  Carolina, 
Pennsylvania,  Phoenix,  Southern 
California,  Texas,  Virginia/DC. 

For  consideration  please  reference 
Job  COde:  RIRCW08  and  send 
your  resume  to:  RCG  Information 
Technology:  Attn:  National  Re¬ 
cruiting,  379  Thornall  Street, 
Edison,  NJ  08837;  FAX:  (732) 
744-3583  or  email  to:  recruit® 
rcait.com.  We  are  an  Equal 
Opportunity  Employer.  M/F/D/V. 

www.rcgit.com 

RCG  Information  Technology 


Programmer  Analyst  (Micro/ 

Web)  -  Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  tor  busi¬ 
ness,  financial,  banking,  manu¬ 
facturing  and  other  commercial 
business  application  systems  in 
a  multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analysis, 
design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SOL  Server. 
Progress.  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic,  MS- 
Windows,  Visual  C++,  JAM, 
APT-SOL.  SOL-FORMS,  ESOL/ 
C,  GUPTA  SQL.  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,829 
-  $78,000  per  year.  Qualified  ap¬ 
plicants  should  contact  or  send 
resume  to  Manager,  Washington 
County  Team  PA  CareerLink, 
Millcraft  Center,  Suite  150LL,  90 
West  Chestnut  Street,  Washing¬ 
ton,  PA  15301-4517.  Refer  to 
Job  Order  #  WEB  230346. 


Programmer  Analyst  /Legacy 

Systems  -  VAX  Computers)  - 

Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
implementation  and  integration 
of  complex  online  transaction 
processing  distribution,  manu¬ 
facturing  and  other  MIS  applica¬ 
tion  systems  in  a  multi-hardware/ 
multi-software  environment  in¬ 
cluding  VAX  cluster  and  VAX 
workstations  using  file  systems, 
relational/network  database 
management  systems,  Third 
Generation  Languages  (3GLs), 
Fourth  Generation  Languages 
(4GLs),  forms  packages  and 
GUI  (Graphical  User  Interface) 
tront-end  tools.  Design  and 
development  of  mission  critical 
client-server  systems  and  mi¬ 
gration  of  legacy  systems  to 
client-server  architecture.  Bach¬ 
elor’s  Degree  (or  equivalent)  in 
Computer  Science-Math/Engi- 
neering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  3  of  B;  or  2  of  A  and  2 
of  B.  A  includes  Rdb,  Oracle  and 
Sybase;  and  B  includes  DEC- 
forms,  DECdesign,  CDD+,  ACMS, 
C.  DECwindows,  Pathworks, 
PowerHouse,  X-Windows/Motif, 
Digital  Unix  and  RMS;  High 
mobility  preferred.  40  hrs/week, 
8  am  -  5  pm.  $66,829  -  $78,000 
per  year.  Qualified  applicants 
should  contact  or  send  resume 
to  JS  Supervisor,  Greene  Coun¬ 
ty  Team  PA  CareerLink,  4  West 
High  Street,  Waynesburg,  PA 
15370-1324.  Refer  to  Job  Order 
#  WEB  230035. 


PROGRAMMER  ANALYSTS 
required  for  our  Warren,  NJ 
office.  Design,  develop  and 
maintain  software  applications 
using  DB2,  IMS  DB/DC/ADF, 
Teradata,  Datacom,  DB/DC, 
PL/1 ,  Assembler,  Natural  ADABAS 
and  also  quality  assurance. 
Bachelors  Degree  required  in 
Computers,  Math  or  any  other 
related  field  of  study  +  2  years 
experience  in  the  job  described 
above.  40  hrs/wk.  Please  send 
resume  to  HR  Manager,  Com¬ 
puter  Manpower  USA,  Inc.  15 
Old  Forge  Drive,  Warren,  NJ 
07059. 


Sr.  Software  Engineer.  Job  loca¬ 
tion:  Cincinnati,  OH.  Duties: 
Analyze,  design,  develop  & 
implement  software  appls.  using 
Java  &  EJB  &  middleware  tools 
incl.  e-gate  &  e-Xchange.  Resp. 
for  integration  of  middleware 
tools  &  planning  &  execution 
&  unit  &  assembly  tests  to  the 
middleware  computer  system. 
Perform  system  enhancement  & 
implement  pkg.  appls.  incl. 
Checkfree  &  PeopleSoft.  Re¬ 
quires:  M  S.  in  Comp.  Sci.,  Eng. 
or  related  field  &  3  yrs.  exp.  in  the 
job  offered  or  3  yrs.  exp.  as  a 
Consult.  Software  Eng.  or  Prog/ 
Analyst.  Will  accept  B.S.  (or  foreign 
equiv.)  &  5  yrs.  of  prog.  exp.  in  the 
computer  ind.  Concurrent  exp. 
must  include  3  yrs.  exp.  in 
middleware  integration  &  3  yrs. 
exp.  using  Java  &  e-gate.  40 
hrs./wk.;  8:00  a.m.  to  5:00  p.m. 
Send  resume  (no  calls)  to:  Molly 
Stone,  CTG,  Inc.,  800  Delaware 
Ave.,  Buffalo,  NY  14209-2094. 


Director  of  Engineering/Software 
Engineers  needed.  cGMP  Sys¬ 
tems,  Inc.,  a  Cambridge,  MA 
based  co,  has  senior  and  mid 
level  positions  available  for  qual¬ 
ified  cands.  poss.  MS/BS  or 
equiv.  and/or  rel.  work  exp.  Du¬ 
ties  will  incl.  design,  developing, 
and  supporting  cGMP  Systems 
GMPWare  applications.  Work 
exp.  must  include  working  w/2  or 
more  of  the  following:  VB,  JAVA, 
J2EE  and  Oracle.  Basic  knowl¬ 
edge  of  FDA  21  CFR  Part  1 1 
compliance  req.  and  pharma¬ 
ceutical  validation  procedures  is 
preferred.  Mail  resume  to:  ATTN: 
cGMP  Systems  Inc.  124  Mt. 
Auburn  Street.  Suite  200N 
Cambridge.  MA  02138-5700. 


Programmer/Analyst  to  analyse, 
design,  develop,  implement, 
maintain  and  support  systems  in 
a  multitier  environment  using 
Informatics,  powercenter/power- 
mart,  decision  point  application, 
Oracle  Express,  Business 
Objects,  Congos,  PLVSQL,  Pow¬ 
er  Designer,  Erwin,  Shell  Scripts. 
Basic  Language,  Oracle  8,  *i  and 
C  on  unix  and  Windows  Platforms. 
Require:  BS  Degree  in  Comput¬ 
er  Science,  an  Engineering  disci¬ 
pline.  or  a  closely  related  field 
with  2  years  of  progressively  re¬ 
sponsible  experience  in  the  Job 
offered  or  in  the  related  occupa¬ 
tion  of  Software  Engineer  or 
System  Engineer.  Extensive 
travel  on  assignments  to  various 
client  sites  within  the  US  is  re¬ 
quired.  Competitive  salary  of¬ 
fered.  Apply  by  resume  to:  Ravi 
Kandimalla.  President,  EVER¬ 
EST  COMPUTERS  INC.,  900 
Old  Rosewell  Lakes  Parkway, 
Suite  300,  Rosewell,  GA  30076: 
Attn:  JobRP 


SOFTWARE  ENGINEER  to 
design,  develop,  test,  maintain 
and  implement  sales  and  distri¬ 
bution  enterprise  application 
software  using  Object  Oriented 
programming  techniques,  Java, 
C++,  RDBMS,  Oracle,  Oracle 
Financials,  MS  SQL  Server, 
Weblogic,  Websphere  and  XML 
under  Windows  and  UNIX 
operating  systems;  Develop 
J2EE  frameworks  and  patterns 
for  enterprise  software  develop¬ 
ment.  Require:  B.S.  degree  in 
Computer  Science,  and  Engi¬ 
neering  discipline,  or  a  closely 
related  field  with  four  years  of 
experience  in  the  job  offered. 
Extensive  travel  on  assignments 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Sam  Bharath,  President, 
Netserv  Applications  Inc.,  1410 
Bittercress  court,  Alpharetta,  GA 
30005;  Attn:  Job  LA. 


Network  Manager.  Qualifications: 
BS  in  Comp.  Sci.  or  related,  3-5 
yrs  experience  w/Windows 
NT/2000  Exchange.  SMS,  AD, 
Oracle  DBA,  Cisco  &  Unix  a 
plus.  E-mail  resume  to: 
(into@jemzs.com  )  or  mail  to 
JEMZS,  1101  N.  Market  St., 
Suite  275,  Milwaukee,  Wl  53202. 


VEGA  is  currently  staffing  for 
long  term,  stimulating  consult¬ 
ing  projects  throughout  the  USA. 
We  are  hiring  professionals  with 
any  of  the  following  skills: 
AS/400,  Cobol/DB2,  Oracle/ 
SQL  Server,  VB,  C++,  Java/ 
HTML,  PowerBuilder,  Mercator, 
SQL  Server  DBA,  Synon,  Siebel. 
We  also  have  opportunities 
for  in-house  sales/marketing 
and  recruiting  talent.  Contact: 
emarcus@vegaconsulting.com 


SOFTWARE  ENG  4  -  Formulate/ 
define  specs  for  complex  appli¬ 
cations.  Design,  code,  test 
&  implement  programs.  B.S 
Computer  Sci  or  equiv  +  2  yrs 
exp  in  job  or  Programmer  Analyst. 
Exp  w/  e-linking,  analyzing 
systems  &  business  workflow. 
Proficient  in  C  or  Perl  +  one  or 
more  object  oriented  programming 
language.  Competitive  Salary. 
Send  resume  to:  Hariand  Business 
Solutions,  300  E.  Meridian,  Milton, 
WA  98354 


Raleigh  company  seeking  pro¬ 
fessional  services  consultant 
to  design  and  implement  an 
enterprise  solution  at  customer 
site.  Must  have  3  years  experi¬ 
ence  providing  Siebel,  BEA  or 
IBM  software  consulting  sen/ices 
to  large  enterprises  or  a  Bachelor's 
degree  in  Comp.  Sci  or  related 
field  and  one  year  of  experience. 
Experience  with  Windows  NT, 
Unix,  Java,  JSP,  ASP,  HTML, 
and  SQL.  Capable  of  doing  java- 
based  platform  development 
when  needed.  60%  travel  to 
clients  sites  required.  Qualified 
candidates  apply  at  http://www. 
alerts. com/company/employ¬ 
ment/  or  mail  resume  to:  Attn: 
Human  Resources  Department, 
380T  Lake  Boone  Trail,  Suite 
200,  Raleigh,  NC  27607.  EOE. 


SYSTEMS  ANALYST  to  analyze, 
design,  develop,  implement  and 
support  application  software 
systems  in  a  client/server  envi¬ 
ronment  using  objet  oriented 
programming.  Lotus  Domino, 
DB2,  Lotus  Script,  Java  Script, 
COBOL  and  JCL  under  Windows 
and  DOS  operating  systems. 
Require:  B.S.  degree  in  Comput¬ 
er  Science,  an  Engineering 
discipline,  or  a  closely  related 
field  with  two  years  of  experience 
in  the  job  offered  or  as  a 
Programmer.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to:  Pishu 
Harjani,  President,  Focus  Soft¬ 
ware,  Inc.,  22  Perimeter  Center 
East,  Suite  2205,  Atlanta,  GA 
30346;  Attn:  Job  SS. 


SOFTWARE  ENGINEER  to 
design,  develop  and  maintain 
Common  Payment  Remitter 
software  for  the  insurance 
industry  using  Visual  Basic, 
Visual  C/C++,  PL/SQL,  Crystal 
Reports,  MS  SQL  Server  and 
Oracle  on  Windows  NT/2000 
platforms;  Prepare  technical 
documentation,  verity  specific 
enhancement  and  customize 
Common  Payment  Remitter 
Software.  Require:  M.S.  degree 
in  Computer  Science,  an  Engi¬ 
neering  discipline,  or  a  closely 
related  field  with  two  years  of 
experience  in  the  job  offered  or 
as  a  Systems  Analyst.  Extensive 
travel  on  assignments  to  various 
client  sites  within  the  U.S.  is 
required.  Competitive  salary 
offered.  Apply  by  resume 
to:  Steve  Thomas,  President, 
SpecSoft,  Inc.,  3618  Windy 
Court,  Tucker,  GA  30084;  Attn: 
Job  KS. 


COMPUTER/IT 

Senior  Systems  Engineer. 
Requires  a  Bachelor's  degree  or 
equivalent  foreign  education  in 
computer  science  or  related  field 
and  one  year  of  experience  in 
the  job  offered  or  one  year  of 
experience  in  the  development 
of  assessment  and  instruction 
machine-learning  applications 
for  research  and  design  and 
production  environments.  Ali 
stated  experience  must  include 
development  of  automated  es¬ 
say  evaluation  tools;  and  use  of 
Perl,  Java,  and  SAS  program¬ 
ming.  40  hrs./wk.  8:00-5:00. 
Apply  with  resume  to:  Ann 
Willard,  ETS  Technologies,  Inc., 
Rosedaie  Road,  Princeton,  NJ 
08541. 


TO  HIRE. 
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Pro  Softnet  Corporation  has 
multiple  openings  at  its  Wood¬ 
land  Hills  office,  and  unanticipated 
client  sites  throughout  the  U.S  for 
the  following  postions:  Software 
Engineers,  Programmer  Analyst, 
Business  Manager.  Management 
Analyst.  Mail  resumes  to  :  Pro 
Softnet  Corp,  21 300  Vicory  Blvd. 

V 

#  1230  Woodland  Hills,  CA 
913007  Attn  R.  Kulkarni  Code 
P101. 


You  can 
find  a 
better 

JOB 

with  one 
hand  tied 
behind 
your  back. 


Just  point  your 
mouse  to  the 
world’s  best 
IT  careers  site. 

Brought  to 
you  by 

Computerworld, 
Info  World  and 
Network  World. 

Find  out  more. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley, 
1-800-762-2977 

Where  the  best 
get  better 


Online 


SNWOnline.com  offers  comprehensive 
reporting  and  feature  stories,  with  a  focus 
on  IT  Leaders  who  seek  education  and 
practical  advice  on  the  deployment  of 
storage  networking  solutions. 


www.  snwonline .  com/300 


April  8-io,  2002 

The  Westin 
St.  Francis  Hotel 

San  Francisco,  CA 


FEATURED  SPEAKERS 

Kayvan  Alikhani  |  CTO,  MagnetPoint 
John  Anderson  |  Senior  Director  of  Advanced 
Technology  Planning,  EDS 

Rowland  Archer  |  CTO  and  co-founder,  HAHT  Commerce  § 
Ian  Baird  |  CTO,  Chief  Grid  Strategist  &  Chief  Business 
Architect,  Platform  Computing  and  President,  NPI,  Inc. 

Kent  Beck  |  Director,  Three  Rivers  Institute 
Marc  Benioff|  Chairman  &  Founder,  salesforce.com 
Rajeev  Bharadhwaj  |  CTO,  Ejasent 
John  Blair  |  Co-founder,  President,  &  CEO,  Kenamea 
Grady  Booch  |  Chief  Scientist,  Rational  Software 
Jon  Bosak  |  Online  Information  Technology  Architect 
Sun  Microsystems 

Tim  Bray  |  Founder,  Antarctica  Systems 
Barry  Briggs  |  CTO,  Wheelhouse 
Bill  Bumgarner  |  CTO,  CodeFab 
Dave  Burleigh  |  Technology  Visionary, 
ValuationRepairman.com 

Mike  Dunn  |  CTO  &  Executive  VP,  Encoda  Systems 
Hossein  Eslambolchi  |  CTO,  AT&T, 
and  President,  AT&T  Labs. 

Robert  “Buck"  Flannigan  |  CTO  divine  Software 
Services,  divine 

Greg  Giles  |  Member  of  Technical  Staff,  Cisco 
Andrew  Grimshaw  |  CTO,  AVAKI 
Alan  Harbitter  |  CTO,  PEC  Solutions 
Rick  Hayes-Roth  |  CTO,  Software  Solutions, 

Hewlett-Packard 

Wade  Hennessey  |  CTO  &  VP  of  Engineering,  Kontiki 
Andre  Hill  |  CTO,  Plural 
Tim  Howes,  Ph.  D.  |  CTO,  Executive  VP  of 
louddoud  Development,  &  Co-Founder,  Louddoud 
Jack  Jia  |  Senior  VP  &  CTO,  Interwoven 
Craig  Larman  |  Director  of  Process,  Valtech  Technologies 
Sheldon  Laube  |  Chairman  and  CEO,  CenterBeam 
Dr.  William  Mark  |  VP,  Information  &  Computing 
Sciences,  SRI  International 
Dr.  Henry  McDonald  |  Director, 

NASA  Ames  Research  Center 
Sunny  McRae  |  VP  of  Engineering  and  CTO,  Xign 
Dawn  Meyerriecks  |  CTO,  Defense  Information 
Systems  Agency 
Imad  Mouline  |  CTO,  Si 
Bruce  Parker  |  EVP,  Sapient 

Ameet  Patel  |  CTO,  LabMorgan.JP  Morgan  Chase  &  Co. 

Rob  Pennington  |  Director  of  Computing  &  Data 
Management,  NCSA 
Mike  Ragunas  |  CTO,  Staples.com 
Glenn  Ricart  |  Executive  Vice  President 
and  CTO,  CenterBeam 

Dennis  Roberson  |  CTO,  Executive  VP  &  CTO,  Motorola 
Andy  Roberts  |  CTO,  Bowstreet 
Gene  Rogers  |  CTO,  Boeing 
Anthony  Scott  |  CTO,  General  Motors 
Dr.  Eric  Schmidt  |  Chairman  &  CEO,  Google 
Igor  Shindel  |  Technology  Consultant,  Result  Architects 
Dale  Skeen  |  CTO,  Vitria 

Hal  Stern  |  CTO.  iPlanet  Software.  Sun  Microsystems 
Chris  Stone  |  Vice  Chairman,  Office  of  the  CEO.  Novell 
Prabakar  Sundarrajan  |  CTO,  NetScaler 
Mike  Toma  |  CTO,  eLabor 
Dave  Turek  |  VP  &  Business  Line  Executive. 

Linux  Clusters,  IBM 

David  Werezak  |  VP.  Product  Planning,  RIM 
Andrew  Wolfe  |  CTO,  SONICBIue 
Dan  Woods  |  CTO,  CapitalThinking 


CONSTRUCTIVE 

DISRUPTION 

CTO:  AGENT  for  CHANGE 


The  challenges  of  the  CTO  are  unlike  anyone  else’s.  You’re  the  one  that  everyone  comes  to 
for  answers,  solutions,  predictions  and  miracles.  As  the  miracle  worker  of  your  enterprise, 
it  is  your  job  to  decipher  what  works  and  what  doesn’t. 

Now  in  its  3rd  year,  this  invitation-only  conference  brings  together  an  exclusive  crowd  of 
people,  like  you,  who  are  driving  the  use  of  disruptive  technologies  to  transform  business 
processes  and  define  the  next  wave  of  innovation. 

Join  200  other  CTOs  for  2V2  days  of  networking,  keynotes,  panels,  practical  discussions,  and 
working  sessions.  Share  ideas  and  swap  stories  about  the  day-to-day  challenges  that  CTOs 
face  at  the  only  event  created  by  CTOs  for  CTOs. 

WHO  SHOULD  ATTEND? 

CTO  Forum  is  an  invitation-only  conference  for  CTOs  and  high-level  technology  executives. 
If  you  do  not  have  a  CTO  title,  but  are  making  high-level  technology  decisions,  you  may  still 
be  entitled  to  attend. 


FEATURED  SESSIONS 

The  Role  of  the  CTO  in 
Today's  Economy 

Disruptive  Technologies:  From 
Annoyance  to  Reliance 

Extreme  Programming 
Grid  Computing 
Wireless  Infrastructure  Issues 
A  Look  Inside  the  Labs 


■  Software  as  a  Service 

■  Disaster  Recovery  Best  Practices 

■  Marriage  of  Business  and  Technology: 
Critical  Skills  for  CTOs 

■  Business  Continuity  Best  Practices 

■  IT  Project  Management  and  Priority- 
Setting  in  Today’s  Economy 

■  Next  Generation  Systems  Management 


SPECIAL  EVENTS 

Monday,  April  8,  2002  Pac  Bell  Park  Technology  Tour 

Be  our  guest  for  a  behind-the-scenes  technology  tour  of  Pac  Bell  Park,  home  of  the  San  Francisco 
Giants.  The  tour  will  be  conducted  by  the  SF  Giants  CIO  and  a  senior  IS  department  staff  member. 

Wednesday,  April  10,  2002  SF  Giants  vs.  LA  Dodgers  Baseball  Game 

Be  our  guest  as  the  San  Francisco  Giants  take  on  the  LA  Dodgers  at  Pac  Bell  Park  in  San  Francisco. 

*  Attendance  to  these  events  is  available  on  a  first-come  first-served  basis.  Space  is  limited. 


KEYNOTE  SPEAKERS 


Dr.  John  Seely 
Brown 

Chief  Scientist 

Xerox 

Corporation 


K.  Eric 
Drexler 
Chairman 

The  Foresight 
Institute 


Patrick 
Gelsinger 
VP  &  CTO 

Intel  Corporation 


Vi  nod 
Khosla 

General  Partner 

Kleiner  Perkins 
Caufield  &  Byers 


Norman 

Lorentz 

CTO 

U.S.  Federal 
Government 


Mark 
Lucovsky 
Chief  Software 
Architect  for  Hailstorm 

Microsoft 


Irving 

Wladawsky- Berger 
VP  of  Technology 
Strategy 

IBM 


Request  your  invitation  now!  Go  to  http://ctoforum.infowoHd.com/RFiq 


Partner  Sponsor:  Contributing  Sponsor: 

intel,  FatWire 


For  more  information,  contact:  866-292-5805 
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HP/Compaq 

make  the  deal  worthwhile  in 
the  long  term,  some  users  said. 

“The  merger  gives  HP 
enough  horsepower  at  a  high 
level  to  compete  with  IBM, 
which  could  perhaps  end  up 
being  a  good  thing  for  users,” 
said  Steve  Willard,  plant  man¬ 
ager  at  Spectra  American  Col¬ 
or  Lab  Inc.  in  Sun  Valley,  Calif. 

Such  sentiments  came  in  the 
wake  of  HP  CEO  Carly  Fiori¬ 
na’s  assertion  last  week  that  a 
“slim  but  sufficient”  majority 
of  HP  shareholders  had  voted 
for  the  merger.  The  results  are 
still  preliminary  and  have  to  be 
certified. 

But  Fiorina’s  victory  claim, 
made  less  than  an  hour  after  a 
special  shareholders’  meeting 
to  vote  on  the  merger,  was  im¬ 
mediately  challenged  by  Wal¬ 
ter  Hewlett,  an  HP  board  mem¬ 
ber  and  a  key  opponent  of  the 
acquisition. 

“In  a  proxy  contest  this 
close,  where  stockholders  are 
changing  their  votes  right  up 
until  the  closing  of  the  polls,  it 
is  simply  impossible  to  deter¬ 
mine  the  outcome  at  this  time. 
It  is  now  in  the  hands  of  the  in¬ 
dependent  inspectors  of  elec¬ 
tion,  and  we  look  forward  to 
the  certified  results,”  Hewlett 
said  in  a  statement. 

Despite  the  uncertainty,  Fio¬ 
rina  last  week  was  proceeding 
as  if  the  merger  had  been  ap¬ 
proved.  Shortly  after  the  merg¬ 
er  is  legally  finalized  in  a  few 
weeks,  customers  can  expect 
to  get  full  and  detailed  product 
road  maps  and  complete  de¬ 
tails  on  their  account  teams, 
Fiorina  said. 

Plans  are  already  in  place  to 
merge  the  HP  and  Compaq 
Web  sites,  and  customer  ser¬ 
vice  representatives  of  the 
merged  organization  will  soon 
be  briefed  on  how  to  take  calls 
from  customers  of  either  com¬ 
pany,  Fiorina  said. 

As  previously  announced, 
HP  will  lay  off  about  15,000 


employees  worldwide  over  the 
next  six  to  nine  months,  Fiori¬ 
na  said.  The  layoffs  will  come 
from  both  HP  and  Compaq. 

A  team  of  more  than  900 
people  has  been  working  on  the 
integration  for  over  six  months 
and  is  prepared  to  put  those 
plans  into  motion  to  ensure  a 
smooth  transition,  Fiorina  said. 

Despite  such  assurances, 
users  can  expect  a  fairly 
bumpy  ride  in  the  near  term  as 
HP  and  Compaq  work  through 
the  merger,  said  Dwight  Davis, 
an  analyst  at  Summit  Strategies 
Inc.  in  Boston. 

Stamford,  Conn.-based  Gart¬ 
ner  Inc.  has  made  a  similar 
assessment.  “Field  service  and 
sales  will  likely  undergo  sub¬ 
stantial  turmoil,  as  merger-dri¬ 
ven  reassignments  or  cost-cut- 
ting  layoffs  cause  some  of  the 
best  employees  to  leave  and 
some  geographic  territories  to 
have  rougher  transitions  than 
others,”  said  Gartner  analyst 


BY  JAIKUMAR  VIJAYAN 

ackers  last  week 
broke  into  a  serv¬ 
er  hosting  thou¬ 
sands  of “parked” 
domains  that  had 
been  registered  through  Veri¬ 
sign  Inc.’s  Network  Solutions 
unit. 

The  compromised  server, 
which  was  running  Microsoft 
Corp.’s  Internet  Information 
Server  (IIS)  software,  was  being 
hosted  for  VeriSign  by  Atlanta- 
based  Interland  Inc. 

Parked  domains,  which  are 
also  known  as  domain  aliases, 
are  domain  names  that  point 
to  an  existing  domain.  For  ex¬ 
ample,  computerworld.org  and 


JUST  THE  FACTS 


The  Fallout 

IT  industry  implications  of  the 
HP/Compaq  merger: 

■  Dell,  IBM  and  Sun  will  likely  gain  share 
from  HP  and  Compaq  through  Q1 2003. 

■  HP  and  Compaq  will  lead  a  round  of 
industrywide  price  cuts  in  a  bid  to  retain 
market  share. 

■  Support  for  Linux  and  IBM  AIX  will 
increase  among  independent  software 
vendors,  most  likely  at  the  expense  of 
HP/UX  and  Compaq  Tru64. 

SOURCE:  GARTNER  INC.  STAMFORD.  CONN 

Paul  McGuckin  in  a  report  on 
the  deal. 

“I  find  it  hard  to  believe  that 
there  will  be  no  impact  on  ser¬ 
vice  and  support,”  said  Bob 
Palmer,  vice  president  of 
Lenox  Collections  IT  at  Lenox 
Inc.,  a  maker  of  tableware  and 
giftware  in  Lawrenceville,  N.J. 

In  the  long  term,  the  deal 
could  make  HP  a  much 


computerworld.net  could  be 
two  parked  domains  pointing 
to  computerworld.com. 

The  idea  is  to  ensure  that 
when  a  user  types  in  any  one  of 
the  three  addresses,  it  brings 
him  to  the  main  domain,  com- 
puterworld.com.  The  goal  of 
having  such  domains  is  to  pre¬ 
vent  companies  with  similar 
names  from  having  similar  do¬ 
main  addresses. 

Because  of  last  week’s 
breach,  Web  surfers  who  typed 
in  the  addresses  of  any  of  the 
domains  on  the  VeriSign  server 
were  directed  to  a  page  owned 
by  the  hackers,  according  to  an 
Interland  spokeswoman. 

The  problem  was  discovered 


stronger  player  in  the  data  cen¬ 
ter  market  and  give  users 
wider  choices  for  platforms 
and  services,  said  Dave 
Krauthamer,  MIS  manager  at 
Advanced  Fibre  Communica¬ 
tions  Inc.  in  Petaluma,  Calif. 
“Their  big  challenge  is  going  to 
be  creating  one  brand,”  he  said. 

“It  will  be  interesting  to  see 
how  they  aggressively  move 
forward  with  integrating  their 
companies,  driving  out  the 
necessary  cost  savings  and 
then,  most  importantly,  deliv¬ 
ering  a  better  value  package  to 
the  consumers  of  this  technol¬ 
ogy,”  said  Steven  J.  Matheys, 
CIO  at  Schneider  National  Inc. 
in  Green  Bay,  Wis. 

“It  is  unclear  to  me  at  this 
time  what  that  value  will  be, 
but  we  will  keep  an  eye  on  it,” 
he  added.  ► 

MORE  f HIS  ISSUE 

What  should  HP  and  Compaq  be  doing  now 
for  customers?  See  page  24. 


March  19  and  was  fixed  in  less 
than  two  hours,  she  added,  re¬ 
fusing  to  provide  any  further 
details. 

Such  a  breach  can  easily 
compromise  sensitive  infor¬ 
mation,  such  as  address  and 
billing  information  relating  to 
the  main  domain,  said  Russ 
Cooper,  an  analyst  at  Herndon, 
Va.-based  TruSecure  Corp.  In 
many  cases,  such  breaches  in¬ 
volving  Microsoft’s  IIS  servers 
are  relatively  easy  to  guard 
against,  Cooper  said. 

“I  would  be  surprised  to  see 
if  this  was  a  sophisticated  at¬ 
tack  against  a  hardened  IIS 
server,”  Cooper  said.  Instead, 
the  hackers  most  likely  gained 
access  into  the  Interland-man- 
aged  VeriSign  server  by  taking 
advantage  of  known  vulnera¬ 
bilities  in  IIS,  he  said.  I 


Analyst:  Start 
Bargaining  Now 

In  the  short  term  at  least,  corpo¬ 
rations  may  have  a  chance  to 
negotiate  deep,  multiyear  dis¬ 
counts  on  high-end  Unix  servers 
and  storage  products  from  a 
postmerger  HP,  according  to  a 
Gartner  report. 

HP’s  need  to  demonstrate 
revenue  growth  and  market 
share  after  its  merger  with  Com¬ 
paq  is  likely  to  make  the  compa¬ 
ny  more  amenable  to  attractive 
price  discounting,  said  Paul 
McGuckin,  author  of  the  Gartner 
report. 

Most  of  the  flexibility  will  be  in 
the  high-end  server  and  storage 
lines  where  HP  will  need  to  stave 
off  aggressive  rivals  such  as  IBM 
and  Sun  Microsystems  Inc.,  both 
of  which  are  sure  to  try  to  gain 
market  share  by  going  after  HP 
customers  during  the  integration 
period,  McGuckin  said. 

Be  prepared  to  see  a  new 
round  of  price-cutting  by  HP 
across  many  product  lines  for 
the  same  reason,  he  added. 

Both  HP  and  Compaq  have 
indicated  that  the  merger  will 
result  in  some  products  being 
phased  out.  As  a  result,  compa¬ 
nies  that  are  thinking  of  making 
major  investments  in  “risky” 
technologies  such  as  OpenVMS 
and  Tru64  Unix  may  want  to  use 
the  merger  as  an  opportunity  to 
migrate  to  alternate  platforms, 
McGuckin  said. 

The  most  immediate  impact 
of  the  merger  is  likely  to  be  felt 
by  field  service  and  sales  forces. 
Though  HP  has  stressed  that 
such  customer-facing  employ¬ 
ees  will  be  the  least  affected  by 
the  merger,  McGuckin  expects 
considerable  turmoil  because  of 
reassignments  and  layoffs. 

The  best  thing  for  companies 
to  do  is  to  keep  in  close  and  fre¬ 
quent  contact  with  their  existing 
representatives  and  to  make 
sure  that  any  new  customer 
team  assigned  to  them  after  the 
merger  is  quickly  brought  up  to 
speed  on  the  account,  he  added. 

-  Jaikumar  Vijayan 


Hackers  Breach  VeriSign 
‘Parked’  Domain  Server 

Vulnerability  suspected  in  Microsoft  IIS 
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FRANK  HAYES/FRANKLY  SPEAKING 

Order  From  Chaos 


fHE  IT  PEOPLE  at  Georgia  Institute  of  Technology 
weren’t  exactly  prepared  two  weeks  ago  when  they  dis¬ 
covered  that  a  server  in  their  business  office  had  been 
hacked.  That  server  contained  two  years’  worth  of  trav¬ 
el  reimbursement  data,  passwords  for  the  on-campus 
purchasing  system,  and  employee  credit  card  numbers  and  personal 
information  —  all  of  which  may  have  been  compromised. 

There  was  no  contingency  plan  for  an  IT  security  breach  like  this. 
They  had  to  scramble. 


But  the  way  Georgia  Tech’s  IT  people  han¬ 
dled  it,  they  might  have  been  working  from  a 
textbook  checklist  of  how  to  get  it  right. 

Step  1:  Spot  the  problem.  On  Monday,  March  11, 
a  webmaster  noticed  the  server’s  log  files  had 
been  erased.  He  sounded  the  alarm. 

Step  2:  Plug  the  hole.  That  meant  immediately 
limiting  access  to  the  server. 

Step  3:  Figure  out  just  how  bad  things  are.  On 
Monday  and  Tuesday,  Georgia  Tech’s  IT  people 
had  no  contingency  plan  for  a  server  break-in, 
but  they  knew  they  had  to  analyze  before  they 
could  act.  They  checked  the  server’s  bandwidth 
usage  and  spotted  a  big  spike  in  traffic  over  the 
weekend  —  a  350GB  spike.  Someone,  or  a  lot 
of  someones,  had  pulled  a  huge  amount  of  data 
off  the  server,  then  nuked  the  logs.  This  wasn’t 
subtle  hacker  exploration  —  this  traffic  looked 
like  Grand  Central  Station. 

Then  the  IT  team  cataloged  what  was  on  the 
server  and  identified  the  scope  of  the  potential 
problem:  employee  names  and  personal  infor¬ 
mation,  credit  card  and  Social  Security  num¬ 
bers,  passwords,  and  images  of  signatures  for  as 
many  as  1,000  faculty  members  and  other  em¬ 
ployees. 

Step  3a:  Call  the  cops.  Actually,  the  IT  staffers 
did  that  as  soon  as  they  had  some¬ 
thing  solid  to  report.  And  they  kept 
the  university  administration  and 
the  appropriate  department  heads 
in  the  loop  as  well. 

Step  4:  Call  the  banks.  All  the  uni¬ 
versity  credit  cards  whose  numbers 
were  on  the  server  had  to  be  can¬ 
celed  and  replaced. 

Step  5:  Hold  the  big  meeting. 

Wednesday  afternoon,  the  IT  team 
laid  out  what  it  knew,  suspected, 
hoped  and  feared  at  a  meeting  with 
administrators  and  department 
heads.  Their  theory:  The  hackers 
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had  used  the  server  as  a  way  to  distribute  one 
or  more  very  large  files,  such  as  a  digitized 
movie.  Their  hope:  The  financial  data  was  un¬ 
touched.  Their  fear:  What  if  it  wasn’t? 

The  decision  that  came  out  of  the  meeting 
was  to  not  take  any  chances.  IT  and  the  univer¬ 
sity’s  public  affairs  office  went  to  work  drafting 
a  memo  that  would  lay  out  what  happened  and 
what  affected  employees  should  do. 

Step  6:  Tell  the  people  affected.  Thursday  at 
about  noon  —  three  days  after  the  break-in  was 
discovered  —  the  memo  went  out  as  e-mail  to 
everyone  whose  personal  information  might 
have  been  exposed.  It  was  also  posted  on  a  Web 
site  at  www.fraud_concern.gatech.edu.  The 
memo  is  a  small  masterpiece  of  direct  commu¬ 
nication,  complete  with  concise  explanations, 
clear  recommendations  and  even  telephone 
numbers  for  credit  reporting  agencies. 

Step  7:  Follow  up.  So  far,  no  wave  of  credit  card 
fraud  has  been  reported  by  Georgia  Tech  em¬ 
ployees.  But  Georgia  Tech’s  IT  people  will  keep 
tracking  any  problem  reports  —  and  keep  feed¬ 
ing  information  to  users  as  it  arrives. 

Was  their  response  perfect?  No.  Maybe  it 
would  have  been  quicker  with  better  planning. 
Maybe  they  should  have  notified  credit  card 
holders  right  away  and  not  waited 
for  more  information. 

But  they  didn’t  fall  into  traps  like 
institutional  inertia  or  an  urge  to 
bury  the  problem  and  hope  for  the 
best.  They  acted  fast,  they  got  a  lit¬ 
tle  lucky  —  and  they  did  OK. 

So  take  a  lesson  from  Georgia 
Tech.  Study  that  checklist  and  learn 
from  it.  Download  that  memo  to 
users  and  crib  from  it.  Remember, 
just  because  they  weren’t  really  pre¬ 
pared  doesn’t  mean  you  can’t  be. 
And  just  because  they  got  lucky 
doesn’t  mean  you  will  be.  > 


SYSADMIN  pilot  fish  warns 
everyone  of  the  Goner  virus,  with 
instructions  to  delete  and  not 
open  it.  Next  day,  a  user  opens  it 
“because  it’s  from  someone  she 
knows,"  and  unleashes  the  virus. 
“Didn’t  you  read  the  notice?"  fish 
asks.  “Yes,”  says  user.  “But  that 
was  yesterday.” 

PROPOSALS  FULL  of  mangled 
grammar  prompt  IT  pilot  fish  to 
suggest  that  the  boss  authorize 
buying  grammar-checking  soft¬ 
ware  for  the  department.  Boss  is 
immediately  interested.  “Order  a 
copy,"  he  tells  fish.  “And  install  it 
on  my  home  computer  -  this  will 
be  great  for  my  kids’  homework.” 


backed  up  anything  for  more 
than  a  month.  “So  he  took  the 
single  floppy  he  used  for  back¬ 
ups  and  backed  up  the  corrupted 
database  to  it,"  fish  says.  “  Then 
he  called  me." 

AFTER  months  of  excruciating 
practice,  user  at  remote  site 
learns  to  correctly  insert  tapes 
every  day  so  IT  pilot  fish  can  run 
backups  remotely.  A  few  weeks 
later,  the  site  drops  off  the  net¬ 
work.  “Do  you  have  lights?"  fish 
asks  user.  “No,”  she  says.  “Well, 

I  guess  your  power  is  out,”  he 
tells  her.  Asks  worried  user:  “Is 
this  because  I  didn’t  put  a  back¬ 
up  tape  in  the  server?” 


TROUBLESHOOTING  user’s 
PC  problem,  PC  tech  pilot  fish 
says,  “Check  for  a  battery  icon  in 
the  lower  right  corner  of  the 
screen,  next  to  the  clock.”  I  don’t 
have  a  clock,  she  says.  “All  the 
way  down  to  the  right?”  fish 
asks.  “There  is  no  clock  there," 
snaps  user.  “Just  the  time.” 

PROGRAMMER  pilot  fish  dis¬ 
tributes  a  new  database  applica¬ 
tion,  along  with  detailed  instruc¬ 
tions  for  making  weekly  and 
monthly  backups.  When  the 
database  at  one  site  gets  cor¬ 
rupted,  user  realizes  he  hasn’t 


A  pilot  fish  headed  for  Sun's 
JavaOne  conference  grumbles 
about  Sun’s  “religious  insensitiv¬ 
ity”  in  scheduling  it  this  week. 
The  company  promises  it’ll  have 
special  meals  and  lists  of  local 
places  of  worship.  “But  did  they 
ever  think  families  might  want  to 
get  together  on  Passover  or 
attend  services  during  Holy 
Week?”  the  fish  asks.  Sun  may 
not  listen,  but  I  will:  sharky® 
computerworld.com.  You  get 
a  sharp  Shark  shirt  if  your  true 
tale  of  IT  life  sees  print  -  or  if  it 
shows  up  in  the  daily  feed  at 
computerworld.  com/sharky. 


The  5th  Wave 


tSAKT 


W  tak,  Justin -thatfe 

darn  impressive!  Hhat 
else  can  that  little 
programmable  robot  of 
•qoors  do?  How  about 
sewing  up  and.  dreeing 
that  incision? 


£  Rich  Tennant,  www.the5thwave.eom 
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How  can  you  bring  consistency 
and  clarity  to  decision  making? 

Unleash  the  potential  of 
all  your  information  assets? 

And  give  your  enterprise  a  single, 
shared  version  of  the  truth? 


SAS*  is  all  you  need  to  know. 


SAS  brings  together  information  from  any  source, 
across  every  platform,  and  creates  real  intelligence. 
We’re  No.  1  in  data  warehousing.  And  only  SAS 
integrates  data  quality  with  today’s  most  powerful 
extraction,  transformation  and  loading  (ETL) 
capabilities.  To  find  out  how  top  companies  are 
reaping  bottom-line  rewards  from  SAS,  call  toll  free 
1  866  270  5727  or  visit  www.sas.com/warehouse 


The  Power  to  Know « 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration. 
€>  2002  SAS  Institute  Inc.  All  rights  reserved.  49349US.0302 
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If  you  want  a  UNIX®  server  with  the  flexibility 
to  run  thousands  of  apps,  consider  this:  the  p610 
can  run  A  IX®5  L  and  it  can  run  Linux®.  In  fact,  it’s 
designed  to  support  the  new  64-bit  Linux  environment. 
The  p610  can  also  save  you  two  things  that  are  essential 
to  any  business:  time  and  money.  How?  Find  out  by  get¬ 
ting  our  “Growing  Business  Essentials  Kit."  For  your 
complimentary  copy,  just  give  us  a  call  or  visit  our  Web 
site.  The  p610.  Check  it  out.  And  see  how  it  runs. 


IBM  (e>  server  pSeries "610 

UNIX 

•  Choice  of  Rackmount  or  Tower  Configuration 

•  1  or  2-way  Power3-ll  333MHz,  375MHz,  or  450MHz 
with  4MB  or  8MB  Level  2  Cache 

•  512MB  ECC  Memory  expandable  to  8GB 

STARTS  AT 

$5995 

•  18.2GB  disk  upgradeable  to  587GB  total 
internal  storage  capacity 

•  6  Hot-Swappable  Ultra3  SCSI  bays 

•  Support  for  RAID  on  internal  disks  with  AIX*5L 

•  2  media  bays  for  CD-ROM  (included),  optional 
DVD-RAM  or  tape  backup 

•  2  Integrated  10/100  Ethernet  connectors 

Success  Lease® 
for  Small  Business 

$196/mo. 

for  36  months 

•  3  serial  port  connections 

•  Light  Path  Diagnostics  and  Integrated 

Service  Processor 

Model  6C1/6E1 

COMPLIMENTARY:  GROWING  BUSINESS  ESSENTIALS  KIT. 


(So  ibm.com/eserver/smb/p610/m15  (J  1  800  426-7777  Priority  Code  102AR001 


Successlease  is  ottered  by  third-party  providers  ot  business  financing  approved  by  IBM  Global  Financing,  SuccessLease  terms  and  conditions  provided  Oy  the  third  party.  Featured  monthly  lease  payments  include  pre-specitied  purchase  option  at  end  of  lease,  to  qualified  business 
customers  only,  installing  in  the  US,  Documentation  lee  and  first  months  payment  due  at  lease  signing;  taxes  are  additional.  Price  shown  is  IBM  list  price  lor  p610  model  server  with  512MB  ECC  and  18.2GB  disk.  Reseller  prices  may  vary.  IBM,  the  e-business  logo,  AIX,  and  pSeries 
are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  UNIX  is  a  registered  trademark  ot  The  Open  Group  in  the  United  States  and  other  countries. 
©  2002  IBM  Corporation.  All  rights  reserved. 


